yt-dlp-downloader

Fail

Audited by Socket on Feb 26, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

Overall, the skill is benign in intent and scope and coherently supports its stated downloading functionality. The main risk drivers are user privacy around cookies and potential misuse of downloaded content, rather than malicious code or exfiltration mechanisms. Treat as a normal, if privacy-conscious, download utility skill.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 26, 2026, 09:22 AM
Package URL
pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Fyt-dlp-downloader%2F@457dd8261889eae626980a9b2de4550190669836
Security Audit — socket — yt-dlp-downloader