skills/sundial-org/awesome-openclaw-skills/youtube-summarizer/Socket

youtube-summarizer

Fail

Audited by Socket on Mar 18, 2026

1 alert found:

Malware

MalwareSKILL.md

HIGH

MalwareHIGH

SKILL.md

SUSPICIOUS: The skill’s main behavior matches its stated purpose, but it relies on a separately authored GitHub dependency installed via git clone/build and can automatically send full transcript files to Telegram. This is a coherent but moderately risky skill due to third-party execution trust and outbound file delivery, not clear malware.

Confidence: 85%Severity: 56%

Audit Metadata

Analyzed At

Mar 18, 2026, 10:59 PM

Package URL

pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Fyoutube-summarizer%2F@29ef2476d17be9fbcc6c7c30320c5f8cf85e4b3f