scrapesocial-youtube
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
scrapesocialCLI package globally using npm (npm install -g scrapesocial@0.1.0). This package is the core tool for the skill's functionality and is provided by the skill's author. - [INDIRECT_PROMPT_INJECTION]: The skill is intended to retrieve and analyze external data from YouTube, including video transcripts and audience comments. This represents a potential surface for indirect prompt injection, as malicious instructions could be present in the external content. This risk is inherent to data retrieval skills and is typically mitigated by agent-level safety filters.
Audit Metadata