YouTube Transcript Pipeline Lite
Security checks across malware telemetry and agentic risk
Overview
This skill is an instruction-only YouTube transcript workflow that stays aligned with its stated purpose and does not request credentials, persistence, or privileged access.
Safe to install for transcript cleanup and packaging workflows. Be aware that it tells the agent to use an existing transcription flow, so review whatever separate transcription or translation tool you choose and avoid processing private or copyrighted material unless you have permission.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.