AIsa Youtube Serp Scout

• Analyzed: May 8, 2026, 1:01 PM
• Findings: 1
• Version: 1.0.2
• Hash: 0fcd9443f1636560ba92cc07ceae0c1c6997e4c874f4f634f26a48bc45c71afe
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate API client for searching YouTube via the AIsa service (api.aisa.one). The Python script (scripts/youtube_client.py) uses standard libraries to perform authenticated GET requests and contains no evidence of data exfiltration, command injection, or obfuscation. Furthermore, the SKILL.md instructions include proactive security guardrails advising the agent not to request sensitive Google credentials or browser cookies from the user.