Security audit
Security checks for vulnerabilities and agentic risk
This skill appears to do what it says: run a local Python script to fetch a YouTube transcript and summarize it.
Before installing, expect the skill to contact YouTube for the requested video and pass the resulting transcript into the LLM for summarization. Avoid using it for private or sensitive video content unless that data flow is acceptable.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
The finding explicitly says the code does not parse YouTube URLs, does not extract transcripts, and instead performs generic network transport with browser/Node interop features. That is a severe description-behavior mismatch and strongly suggests deceptive or repurposed code with unnecessary capability.
No suspicious patterns detected.
