youtube

SUSPICIOUS. The core purpose is coherent, and the `yt-dlp` transcript workflow is proportionate and sourced from an official/verifiable channel. However, the MP3 workflow depends on `ytmp3`, an undocumented and unverifiable CLI with unknown publisher and data flows. That inconsistency makes the skill riskier than a normal documentation/download helper even without evidence of overt credential theft.