v1.0.0

YouTube SERP Scout for agents. Search top-ranking videos, channels, and trends for content research and competitor tracking

BenignClawScan verdict for this skill. Analyzed May 1, 2026, 5:25 AM.

Analysis

This appears to be a straightforward YouTube search helper; the main things to notice are that it uses an AIsa API key and sends search queries to AIsa.

GuidanceBefore installing, verify you trust the publisher, provide only an AIsa API key you are comfortable using for this purpose, monitor API usage, and avoid sending confidential business terms or private data as search queries.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Abnormal behavior control

Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.

Agentic Supply Chain Vulnerabilities

SeverityInfoConfidenceHighStatusNote

metadata

Source: unknown

The registry metadata does not identify a source repository or package provenance. The artifacts do not show a risky installer, but provenance is limited.

User impactYou have less independent assurance about who authored the skill or where updates come from.

RecommendationInstall only if you trust the listed publisher/context, and review updates before granting the API key.

Permission boundary

Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.

Identity and Privilege Abuse

SeverityLowConfidenceHighStatusNote

scripts/youtube_client.py

self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"

The client reads the AIsa API key from the environment and sends it as a Bearer token to the AIsa API. This is expected for the stated service integration, but it gives the skill access to use that credential.

User impactAn agent using this skill can make requests against your AIsa account and may consume API quota or create query history with the provider.

RecommendationUse an AIsa API key intended for this integration, monitor usage, and avoid placing private or sensitive information in search queries unless you are comfortable sending it to the provider.