ClawHub
Back to skill

Security audit

scraping-youtube-playlist

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward YouTube playlist metadata scraper that uses Apify, with privacy and overwrite cautions but no hidden or destructive behavior found.

Install only if you are comfortable sending YouTube playlist URLs, search keywords, and related run inputs to Apify under your APIFY_TOKEN. Use maxItems for large playlists and choose explicit output filenames if saving CSV or JSON results.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (7)

Description-Behavior Mismatch

Medium
Confidence
93% confidence
Finding
The documented inputs broaden the skill from simple playlist-URL scraping to keyword-based playlist discovery and arbitrary per-item transformation via `customMapFunction`. That expansion increases data-collection scope and introduces a code-like customization surface that can enable unsafe downstream behavior or unexpected collection beyond user intent.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
The skill sends user-supplied playlist URLs and related inputs to Apify, a third-party service, but does not clearly warn users about that transmission. This creates a privacy and trust risk because users may assume processing is local and unknowingly disclose URLs, search terms, or usage patterns to an external provider.

External Transmission

Medium
Category
Data Exfiltration
Content
### REST API fallback

```bash
curl -X POST "https://api.apify.com/v2/acts/apidojo~youtube-playlist-scraper/runs" \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"startUrls": ["https://www.youtube.com/playlist?list=PLABCDE12345"], "maxItems": 50}'
Confidence
90% confidence
Finding
The explicit reference to `https://api.apify.com/` reflects a third-party endpoint that receives skill inputs during execution. Although this is inherent to the service integration, failing to frame it as external transmission can mislead users about where their data goes and what trust boundary is being crossed.

External Transmission

Medium
Category
Data Exfiltration
Content
### REST API fallback

```bash
curl -X POST "https://api.apify.com/v2/acts/apidojo~youtube-playlist-scraper/runs" \
  -H "Authorization: Bearer $APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"startUrls": ["https://www.youtube.com/playlist?list=PLABCDE12345"], "maxItems": 50}'
Confidence
90% confidence
Finding
The explicit reference to `https://api.apify.com/` reflects a third-party endpoint that receives skill inputs during execution. Although this is inherent to the service integration, failing to frame it as external transmission can mislead users about where their data goes and what trust boundary is being crossed.

Intent-Code Divergence

Low
Confidence
76% confidence
Finding
The skill is presented as a targeted YouTube playlist extractor, but the inline documentation shifts intent toward unconstrained raw data collection for downstream analysis. That language broadens the stated purpose and conflicts with the narrower manifest framing of a playlist metadata extraction skill.

Natural-Language Policy Violations

Low
Confidence
87% confidence
Finding
The inputs table specifies `hl` defaulting to `en`, which imposes an English-language locale by default. Under the policy, locale constraints should either be user-selectable or clearly justified; this file does not present the default as an opt-in choice or explain why English is required.

Missing User Warnings

Low
Confidence
89% confidence
Finding
In this markdown file, the examples explicitly instruct saving output to `results.csv` and `results.json`, which affects user data handling on the local system. The document does not include any warning or disclosure about file creation, overwrite risk, or where the data will be stored.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.