AIsa Youtube Serp Scout
PassAudited by ClawScan on May 8, 2026.
Overview
This skill appears to do the advertised YouTube search through AIsa, but it uses your AISA_API_KEY and sends search terms to api.aisa.one.
This looks safe for its stated purpose if you trust AIsa with your YouTube research queries. Set AISA_API_KEY only in a trusted environment, avoid sensitive query text, and review the full Python file from the source repository if you want complete code assurance.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone or any agent using this skill can make AIsa API requests using the configured key.
The client reads the AISA_API_KEY credential and sends it as a bearer token to the AIsa API. This is expected for the service and is disclosed, but it is still delegated account/API access.
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"Use a dedicated, revocable AIsa API key if available, and do not expose it in logs, shared terminals, or prompts.
AIsa can receive the YouTube research queries you ask the agent to run.
The skill discloses that search requests are sent to an external AIsa endpoint. This is purpose-aligned, but user search terms, competitor names, locale parameters, and related research inputs leave the local environment.
All search requests go to `api.aisa.one`.
Avoid putting confidential project names, unreleased campaign details, or sensitive personal data into search queries unless you are comfortable sending them to AIsa.
There is a small review-context gap because the full script tail was not visible in the supplied artifact.
The supplied artifact marks the Python source as truncated, so this review could not manually inspect the complete file from the prompt. The visible code is purpose-aligned and the static scan reports clean.
result = client.competito ...[truncated]
If you need high assurance, review the full scripts/youtube_client.py from the published source before installing.