youtube-top-hits
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to save and run a Python script locally (
fetch_top_hits.py). The script performs network requests to the Apify API to fetch data. - [EXTERNAL_DOWNLOADS]: The script uses the
requestslibrary to communicate withapi.apify.com, which is a well-known and legitimate service for web scraping and data extraction. The skill clearly documents this requirement and explains that users must provide their own credentials. - [CREDENTIALS_SAFE]: The skill explicitly advises against hardcoding API keys and instead uses the
APIFY_API_KEYenvironment variable, which is a standard security best practice for managing secrets.
Audit Metadata