youtube-full

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
2
Flagged
2
Chunks
4
Flagged Files (2)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: youtube-full description: Complete YouTube toolkit — transcripts, search, channels, playlists, and metadata all in one skill.

scripts/tapi-auth.jsHIGH
78.3%

Malicious tool definition detected

Tool: scripts/tapi-auth.js [1/3] Description: #!/usr/bin/env node // ============================================================================ // TranscriptAPI CLI — Passwordless Account Setup // // This script helps users create a TranscriptAPI.com account and obtain an // API key. It does NOT handle, store, or transmit passwords.

Tool: scripts/tapi-auth.js [2/3] Description: the save-key command and the verify command (auto-save).

Tool: scripts/tapi-auth.js [3/3] Description: config (for terminal/CLI use):"); shellFiles.forEach((f) => console.log(` ${f.path}`)); console.log(""); } if (otherFiles.length > 0) { console.log(" Other:"); otherFiles.forEach((f) => console.log(` ${f.path} (${f.type})`)); console.log(""); } if (saved.warnings.length > 0) { console.log(" Warnings:"); saved.warnings.forEach((w) => console.log(` ${w}`)); console.log(""); } const platform = process.platform; console.log("To use immediately in current

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
2
Files Flagged
2
Chunks Analyzed
4
Analyzed
Feb 21, 2026, 06:09 PM
Security Audit — runlayer — youtube-full