yt-transcript
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install a CLI tool from a remote repository using
piporuv. The source URLhttps://github.com/sleeplessv/youtube-transcriptbelongs to the skill's author, representing a vendor-owned resource. - [COMMAND_EXECUTION]: The skill's primary function is to execute the
yt-transcriptcommand. It includes capabilities for writing output to files via the-oor--outputflags, as well as shell redirection in provided examples (e.g.,> transcript.json). - [INDIRECT_PROMPT_INJECTION]: The skill processes YouTube transcripts, which are untrusted external data sources. This creates a surface where malicious instructions hidden in a video's captions could potentially influence the agent's behavior during summarization or analysis.
- Ingestion points: Data enters the context via the output of
yt-transcript fetch(SKILL.md). - Boundary markers: The instructions do not define specific delimiters or warnings to isolate the fetched transcript text from the rest of the agent's prompt context.
- Capability inventory: The skill allows file system writes through CLI flags and shell redirection.
- Sanitization: The tool provides a
--cleanflag designed to strip HTML tags and collapse whitespace, providing a layer of content sanitization.
Audit Metadata