youtube-video
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts and system utilities to perform its tasks.
- Evidence:
scripts/lib/launch-check.mjsandscripts/lib/run-ego.mjsusechild_process.spawnandspawnSyncto invokeego-browser. - Evidence: The skill executes Node.js modules for configuration and login verification.
- [DYNAMIC_EXECUTION]: The skill dynamically generates a temporary entry script to facilitate execution within a specialized browser runtime.
- Evidence:
scripts/lib/launch-check.mjsconstructs a JavaScript string containing configuration and imports, which is written to a temporary file (entry.mjs) and executed via theego-browserNode.js environment. - Evidence: Safe practices are used, such as
JSON.stringifyfor variable interpolation into generated code. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from the external YouTube Studio web interface, representing a potential ingestion point for untrusted content.
- Ingestion points:
scripts/lib/studio-dom.mjsscrapes body text, titles, and element attributes fromstudio.youtube.com. - Boundary markers: The skill returns results in a structured JSON format to the calling agent.
- Capability inventory: The skill has the ability to write to
/tmpand execute local shell commands via the platform's browser utility. - Sanitization: Content is filtered using strict regular expressions in
scripts/lib/pure.mjsto extract only valid video IDs and processing status labels.
Audit Metadata