Back to plugin

Security audit

Aisa Youtube Serp Scout Plugin

Security checks across malware telemetry and agentic risk

Overview

The package consistently implements a YouTube SERP client that calls AIsa's API and only requires an AISA_API_KEY and python3 — the requested access and instructions line up with the stated purpose.

This package is internally consistent: it runs a local Python client that calls api.aisa.one and requires an AISA_API_KEY. Before installing, confirm you trust the AIsa service and are comfortable supplying an API key (it will be sent as a Bearer token to the aisa.one API). Verify billing/usage implications of that API key, and if you need tighter privacy, review the script locally to confirm it only sends the queries you expect. Autonomous invocation is allowed by default (normal for skills); if you don't want the agent to call it without confirmation, disable or restrict the skill in your agent settings.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.