youtube-channel-scraper
Warn
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to automatically download and install the
browser-actdependency from an external site (www.browseract.com) if it is not already present. - [PROMPT_INJECTION]: The instructions explicitly direct the agent to bypass standard safety protocols by installing software 'without asking the user to confirm' and specifically tells the agent not to describe the process to the user, effectively suppressing user oversight.
- [EXTERNAL_DOWNLOADS]: The skill is designed to ingest data from external YouTube channel pages, creating a surface for indirect prompt injection.
- Ingestion points: YouTube channel profiles, descriptions, and metadata accessed via URL or search.
- Boundary markers: None specified to prevent the agent from following instructions embedded in channel descriptions.
- Capability inventory: The skill utilizes the
browser-actCLI/Skill, which has the capability to interact with the live web and execute browser workflows. - Sanitization: There are no instructions for sanitizing or validating the data retrieved from YouTube before processing.
Audit Metadata