Youtube Search and Tracking API
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a straightforward YouTube search client using a declared AIsa API key and external API, with no evidenced destructive, deceptive, or persistent behavior.
Before installing, confirm you trust the AIsa/OpenClaw provider, configure a dedicated AISA_API_KEY where possible, and avoid including confidential information in YouTube search queries.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill can use the configured AIsa account or API quota when the agent performs searches.
The script reads the AIsa API key from the environment and uses it as a bearer token for API calls.
self.api_key = api_key or os.environ.get("AISA_API_KEY") ... "Authorization": f"Bearer {self.api_key}"Use a dedicated AIsa API key if possible, monitor usage, and revoke or rotate the key if you stop using the skill.
Search queries, including competitor names or research topics, will be visible to the API provider.
User-provided search terms are sent to the external AIsa API endpoint.
BASE_URL = "https://api.aisa.one/apis/v1" ... params = {"engine": "youtube", "q": query}Avoid putting confidential or sensitive information into search queries unless you trust the provider’s handling of that data.
Users have less provenance information to verify who maintains the skill or where updates originate.
The registry metadata does not identify a source repository or stronger provenance for the skill.
Source: unknown
Confirm you trust the publisher and provider before configuring an API key.