youtube-transcript-cn
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
youtube-transcript-apipackage from PyPI if it is not already present on the system. This is a standard procedure for Python scripts requiring third-party dependencies. - [COMMAND_EXECUTION]: The script uses
subprocess.check_callto run the pip installation command. The command is hardcoded and does not incorporate unsanitized user input, following safe execution patterns. - [DATA_EXFILTRATION]: While the script interacts with YouTube's API via a library, it only retrieves public subtitle data. It does not access sensitive local files or transmit user data to non-whitelisted domains.
Audit Metadata