video-transcript-downloader

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
5
Flagged
5
Chunks
6
Flagged Files (5)
.gitignoreHIGH
78.3%

Malicious tool definition detected

Tool: .gitignore Description: node_modules

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: video-transcript-downloader description: Download videos, audio, subtitles, and clean paragraph-style transcripts from YouTube and any other yt-dlp supported site.

package-lock.jsonHIGH
78.3%

Malicious tool definition detected

Tool: package-lock.json Description: { "name": "video-transcript-downloader", "version": "1.0.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "video-transcript-downloader", "version": "1.0.0", "dependencies": { "youtube-transcript-plus": "^1.1.1"

package.jsonHIGH
78.3%

Malicious tool definition detected

Tool: package.json Description: { "name": "video-transcript-downloader", "version": "1.0.0", "private": true,

scripts/vtd.jsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/vtd.js [1/2] Description: #!/usr/bin/env node import { spawn } from "node:child_process"; import fs from "node:fs"; import os from "node:os"; import path from "node:path"; import { fileURLToPath } from "node:url"; import { YoutubeTranscript } from "youtube-transcript-plus"; const __filename = fileURLToPath(import.meta.url); const __dirname = path.dirname(__filename); function die(message, code = 1) { process.stderr.write(String(message).trimEnd() + " "); process.exit(code); } funct

Tool: scripts/vtd.js [2/2] Description: const paragraph = toParagraph(segments, { keepBrackets }); if (!paragraph) die("empty transcript from subtitles"); process.stdout.write(paragraph + " "); } finally { fs.rmSync(tmpDir, { recursive: true, force: true }); } } async function cmdSubs({ url, lang, outputDir, extra }) { if (!url) die("missing --url"); const { tmpDir, subtitlePath } = await ytDlpSubtitlesToTemp({ url, lang, extra, }); try { const out = path.resolve(outputDir); fs.mkdirSync(out, {

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
5
Files Flagged
5
Chunks Analyzed
6
Analyzed
Feb 21, 2026, 03:50 PM
Security Audit — runlayer — video-transcript-downloader