youtube
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official YouTube Data API v3 endpoints (
https://www.googleapis.com/youtube/v3/) using standard OAuth 2.0 authentication. - [SAFE]: Credential management instructions in the
references/directory follow security best practices, such as recommending the use of environment variables and providing commands that avoid leaking secrets into shell history. - [SAFE]: All API responses are validated and sanitized using Zod schemas defined in
lib/youtube.ts, which ensures that untrusted data from external sources is correctly typed and that unexpected fields are stripped before processing. - [SAFE]: The CLI and MCP server implementation use standard Node.js patterns for process management and script routing without introducing any dangerous dynamic execution or remote code vulnerabilities.
- [SAFE]: The skill provides clear instructions for disambiguation and safety, requiring the agent to seek user clarification for ambiguous matches before performing write operations.
Audit Metadata