The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to install legitimate, well-known software packages including openai-whisper and yt-dlp from official registries (PyPI). It also references downloading the ffmpeg binary from official sources.
[COMMAND_EXECUTION]: The skill provides various shell commands for downloading audio and running transcription models. These are standard uses of the mentioned tools (e.g., yt-dlp -x, whisper audio.wav).
[INDIRECT_PROMPT_INJECTION]: The skill acts on external data (YouTube video audio). While transcription process could technically ingest malicious audio-encoded instructions, this is a theoretical risk common to all transcription tools, and the skill provides no automated way to execute text resulting from the transcription.
[SAFE]: All referenced repositories (e.g., github.com/openai/whisper) and tools are from trusted or well-known organizations. The skill does not contain obfuscation, credential harvesting, or persistence mechanisms.

youtube-transcription