YouTube SERP Scout for agents. Search top-ranking videos, channels, and trends for content research and competitor tracking

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward YouTube search helper; the main things to notice are that it uses an AIsa API key and sends search queries to AIsa.

Before installing, verify you trust the publisher, provide only an AIsa API key you are comfortable using for this purpose, monitor API usage, and avoid sending confidential business terms or private data as search queries.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent using this skill can make requests against your AIsa account and may consume API quota or create query history with the provider.

Why it was flagged

The client reads the AIsa API key from the environment and sends it as a Bearer token to the AIsa API. This is expected for the stated service integration, but it gives the skill access to use that credential.

Skill content
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"
Recommendation

Use an AIsa API key intended for this integration, monitor usage, and avoid placing private or sensitive information in search queries unless you are comfortable sending it to the provider.

What this means

You have less independent assurance about who authored the skill or where updates come from.

Why it was flagged

The registry metadata does not identify a source repository or package provenance. The artifacts do not show a risky installer, but provenance is limited.

Skill content
Source: unknown
Recommendation

Install only if you trust the listed publisher/context, and review updates before granting the API key.