youtube-publish
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Communicates with Google's official OAuth2 and YouTube API endpoints (
googleapis.com) for token management and video uploads. These are well-known, trusted services required for the skill's primary function. - [CREDENTIALS_UNSAFE]: Accesses and updates OAuth2 credentials stored in the user's home directory (
~/.openclaw/credentials/). This is a standard and expected mechanism for CLI-based application authentication and does not represent an unauthorized exposure. - [SAFE]: The skill implementation uses official Google client libraries and standard HTTP protocols (chunked resumable uploads) without any evidence of obfuscation, persistence, or malicious data exfiltration.
Audit Metadata