Security audit
Security checks across malware telemetry and agentic risk
The skill appears to be a video-downloading helper, but it can automatically install software into the user environment without a clearly declared permission boundary.
Review before installing. This does not look malicious from the supplied evidence, but it can change your local Python environment by installing yt-dlp automatically. Prefer installing dependencies yourself in a virtual environment or isolated workspace, and only run it if you are comfortable with local command execution and video-download network activity.
"""Install yt-dlp."""
print("Installing yt-dlp...")
try:
subprocess.run(['pip', 'install', 'yt-dlp'], check=True)
return True
except:
print("Error: Could not install yt-dlp")64/64 vendors flagged this skill as clean.
No suspicious patterns detected.