Back to skill

Security audit

YouTube Reporting

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed YouTube Reporting API integration that uses Maton OAuth/CLI access with clear approval rules for account connections and write operations.

Before installing, confirm you are comfortable routing YouTube Reporting API requests through Maton and storing OAuth/API credentials via Maton's CLI and your OS credential store. Use OAuth where possible, select the narrowest available Google scopes, specify the intended connection when multiple accounts exist, and require explicit confirmation before creating or deleting reporting jobs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.