Security audit
Aisa Youtube Serp Scout Plugin
Security checks across malware telemetry and agentic risk
Overview
The package consistently implements a YouTube SERP client that calls AIsa's API and only requires an AISA_API_KEY and python3 — the requested access and instructions line up with the stated purpose.
This package is internally consistent: it runs a local Python client that calls api.aisa.one and requires an AISA_API_KEY. Before installing, confirm you trust the AIsa service and are comfortable supplying an API key (it will be sent as a Bearer token to the aisa.one API). Verify billing/usage implications of that API key, and if you need tighter privacy, review the script locally to confirm it only sends the queries you expect. Autonomous invocation is allowed by default (normal for skills); if you don't want the agent to call it without confirmation, disable or restrict the skill in your agent settings.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.
