Index Youtube

• Outcome: Pass
• Latest audit: May 28, 2026 at 4:45 AM UTC
• Version:
  2.0.0

Overview

This skill coherently indexes YouTube transcripts locally and does not show deceptive, destructive, or exfiltration behavior.

Install if you want YouTube transcripts and summaries saved in the current workspace. Use ordinary channel handles or URLs, avoid untrusted shell fragments, review the docs/youtube/ output, and only allow browser-cookie access if you explicitly want authenticated YouTube requests.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Low

• Confidence: 91% confidence
• Finding: The skill instructs the agent to download transcripts and write derived content into the local workspace under docs/youtube/ and docs/youtube/index.md, but it does not explicitly warn the user that local files will be created or modified. This is not inherently malicious, but silent filesystem modification can surprise users, overwrite existing notes, or create persistence of downloaded third-party content without informed consent.

VirusTotal

53/53 vendors flagged this skill as clean.