youtube-downloader

SUSPICIOUS. The core yt-dlp purpose is coherent, and yt-dlp itself is installed from a legitimate source, but the skill’s footprint is broader than necessary: silent auto-installation, unofficial ffmpeg fallback, and direct handling of browser/Google/YouTube cookies create notable trust and privacy risk. Data does not appear routed to attacker-controlled endpoints, so this is not confirmed malware, but it is a medium-high risk skill.