ClawHub
Back to skill

Security audit

Youtube Transcript

Security checks across malware telemetry and agentic risk

Overview

This skill mostly does what it says, but it includes high-throughput browser extraction guidance and persistent strategy notes for adapting around YouTube changes, so users should review it before installing.

Install only if you are comfortable with an agent automating your browser on YouTube and saving transcript outputs locally. Avoid using it for large-scale scraping, private or logged-in content, or anything where retained transcript data or extraction-strategy notes would be sensitive.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
93% confidence
Finding
The batch orchestration and multi-session scaling guidance expands the skill from a single-user assistive workflow into bulk extraction automation. That increases the likelihood of high-volume scraping, evasion of normal usage expectations, and unintended abuse of browser sessions beyond the user’s immediate request.

Context-Inappropriate Capability

Medium
Confidence
90% confidence
Finding
The persistent memory file is used to record anti-scraping changes, ineffective strategies, and improved extraction paths, which creates an optimization loop for continued extraction against platform defenses. This goes beyond simple transcript retrieval and can facilitate adaptation to countermeasures while also persisting operational data unnecessarily.

Vague Triggers

Medium
Confidence
79% confidence
Finding
The activation phrases are broad enough to trigger on generic requests like summarizing a video or converting video content to text, even when the prerequisites or intended scope are not met. Over-broad triggering can cause the agent to invoke browser automation unnecessarily, increasing the chance of unintended data access, navigation, or disk writes.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill instructs saving extracted results and appending notes to a persistent memory file without clear user-facing disclosure or consent. That creates a data handling risk because transcript content, URLs, and execution metadata may be written to disk and retained beyond the immediate task.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.