ClawHub
Back to skill

Security audit

analyzing-competitor-youtube-content-strategy

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed YouTube competitor-analysis helper that uses Apify, with manageable cautions around API-token handling and broad scraper options.

Install only if you are comfortable using Apify to process YouTube scrape requests and consuming your Apify quota. Keep APIFY_TOKEN in a secure environment or secret manager, avoid putting it in URLs or shared transcripts, set maxItems to a reasonable limit, and review any customMapFunction before using it.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (6)

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The manifest description is narrowly scoped to analyzing a competitor's YouTube channel and benchmarking channel performance. However, the inputs expose broader scraper capabilities unrelated to that purpose, including `getTrending`, generic `keywords` search, `startUrls` for playlists/search results/Shorts, and a `customMapFunction` for arbitrary per-item transformation.

External Transmission

Medium
Category
Data Exfiltration
Content
**REST API fallback:**
```bash
curl -X POST   "https://api.apify.com/v2/acts/apidojo~youtube-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"startUrls": [{"url": "https://www.youtube.com/@competitorhandle"}], "maxResults": 30, "type": "video"}'
```

### Step 2: Classify Videos
Confidence
84% confidence
Finding
The explicit use of a third-party endpoint is expected for a scraping integration, but the documented curl example includes the token in the request URL, which increases leakage risk via logs, browser history, proxies, and monitoring systems. The context makes this less suspicious than covert exfiltration, yet it remains a genuine credential-handling weakness.

External Transmission

Medium
Category
Data Exfiltration
Content
**REST API fallback:**
```bash
curl -X POST   "https://api.apify.com/v2/acts/apidojo~youtube-scraper/runs?token=$APIFY_TOKEN"   -H "Content-Type: application/json"   -d '{"startUrls": [{"url": "https://www.youtube.com/@competitorhandle"}], "maxResults": 30, "type": "video"}'
```

### Step 2: Classify Videos
Confidence
84% confidence
Finding
The explicit use of a third-party endpoint is expected for a scraping integration, but the documented curl example includes the token in the request URL, which increases leakage risk via logs, browser history, proxies, and monitoring systems. The context makes this less suspicious than covert exfiltration, yet it remains a genuine credential-handling weakness.

Intent-Code Divergence

Low
Confidence
90% confidence
Finding
The overview claims a specific intent and bounded analysis scope focused on a competitor's recent videos. This is contradicted by later documentation allowing `maxItems` as unlimited and supporting trending, keyword, playlist, Shorts, and search-result scraping, which are broader than the stated 'last 20-50 videos' behavior.

Missing User Warnings

Low
Confidence
84% confidence
Finding
The skill requires an APIFY_TOKEN but provides no safety guidance about secret handling, scoping, or avoiding exposure in logs and command history. In this context the token is used to invoke an external paid service, so accidental disclosure could allow unauthorized API use and billing abuse.

Description-Behavior Mismatch

Low
Confidence
85% confidence
Finding
The manifest promises strategy analysis outputs like cadence, format mix, and engagement benchmarks, but the skill documentation also advertises file-saving behavior via `run_actor.js`. While plausible as an implementation detail, persisting raw scrape results is additional behavior not reflected in the manifest description.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.