ClawHub
Back to skill

Security audit

scraping-youtube-channel-info

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Apify integration for collecting public YouTube channel metadata, with no hidden local code, persistence, or destructive behavior found.

Install only if you are comfortable sending YouTube URLs, handles, keywords, and locale options to Apify under your APIFY_TOKEN. Avoid passing secrets or untrusted JavaScript in customMapFunction, and set maxItems to control scraping volume and cost.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Description-Behavior Mismatch

Medium
Confidence
95% confidence
Finding
The skill presents itself as returning channel metadata, but the documentation also states 'Raw data collection' and exposes a customMapFunction parameter that allows arbitrary JavaScript transformation of each output object. This creates a capability gap between the high-level description and the actual behavior, increasing the risk that users or downstream agents pass through or process a broader dataset than intended, including unexpected fields or unsafe transformations.

External Transmission

Medium
Category
Data Exfiltration
Content
### REST API fallback

```bash
curl -X POST "https://api.apify.com/v2/acts/apidojo~youtube-channel-scraper/runs" \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"keywords": ["cooking channel"], "gl": "us", "maxItems": 20}'
Confidence
60% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium
Category
Data Exfiltration
Content
### REST API fallback

```bash
curl -X POST "https://api.apify.com/v2/acts/apidojo~youtube-channel-scraper/runs" \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"keywords": ["cooking channel"], "gl": "us", "maxItems": 20}'
Confidence
50% confidence
Finding
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Natural-Language Policy Violations

Low
Confidence
82% confidence
Finding
The inputs table sets `gl` to `us` and `hl` to `en` as defaults, which imposes a specific country and language preference in the skill's natural-language interface. The file does not indicate that these are optional locale defaults chosen by the user, nor does it justify a region-specific constraint.

Static analysis

No suspicious patterns detected.