ClawHub
Back to skill

Security audit

AIsa Youtube Search

Security checks for vulnerabilities and agentic risk

Overview

This skill is a straightforward YouTube search helper that clearly discloses it sends searches to AIsa's external API using an API key.

Install only if you are comfortable sending YouTube search terms and related filters to api.aisa.one. Use a dedicated, rotatable AISA_API_KEY and avoid putting secrets, private project names, or sensitive personal data into search queries.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (4)

External Transmission

Medium
Category
Data Exfiltration
Confidence
94% confidence
Finding

The skill explicitly directs search requests to an external third-party endpoint and requires sending an API bearer token to that service. This creates a real data egress and secret exposure surface: user queries and associated metadata leave the local environment, and misuse or compromise of the relay could expose the AISA_API_KEY or searched content.

Content

Scanner excerpt · SKILL.md (reported line 54)May include surrounding context.

md
## Quick Reference

- Required environment variable: `AISA_API_KEY`
- Endpoint: `https://api.aisa.one/apis/v1/youtube/search`
- This package is curl-first and does not ship a local Python client.

## Setup

External Transmission

Medium
Category
Data Exfiltration
Confidence
96% confidence
Finding

This example command sends user-supplied search content to an external API together with a bearer token in the Authorization header. Although expected for a network search skill, it is still a genuine external transmission risk because prompts or queries may contain sensitive information and the secret is exposed to the remote service by design.

Content

Scanner excerpt · SKILL.md (reported line 66)May include surrounding context.

Common Commands

bash
curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=machine+learning+tutorial" \
  -H "Authorization: Bearer $AISA_API_KEY"

curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=AI+news&gl=us&hl=en" \

External Transmission

Medium
Category
Data Exfiltration
Confidence
96% confidence
Finding

The skill provides another concrete invocation that transmits query parameters, locale information, and a bearer token to api.aisa.one. The context makes this intentional rather than covert, but it remains a real egress vector and could leak user interests, sensitive search terms, or credentials if operational safeguards are weak.

Content

Scanner excerpt · SKILL.md (reported line 69)May include surrounding context.

md
curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=machine+learning+tutorial" \
  -H "Authorization: Bearer $AISA_API_KEY"

curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=AI+news&gl=us&hl=en" \
  -H "Authorization: Bearer $AISA_API_KEY"

curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=python+tutorial&sp=EgIQAQ%3D%3D" \

External Transmission

Medium
Category
Data Exfiltration
Confidence
95% confidence
Finding

This command continues the same pattern of externally transmitting search requests and authorization credentials to the AIsa relay. The pagination/filter parameter itself is not dangerous, but the overall behavior still constitutes outbound data sharing with a third party and should be treated as a trust and privacy risk.

Content

Scanner excerpt · SKILL.md (reported line 72)May include surrounding context.

curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=AI+news&gl=us&hl=en"
-H "Authorization: Bearer $AISA_API_KEY"

curl -s "https://api.aisa.one/apis/v1/youtube/search?engine=youtube&q=python+tutorial&sp=EgIQAQ%3D%3D"
-H "Authorization: Bearer $AISA_API_KEY"

text

Static analysis

No suspicious patterns detected.