Security audit

Youtube Downloader

Security checks for vulnerabilities and agentic risk

Overview

The skill broadly matches its stated purpose, but weak URL and filename validation could let crafted inputs download from unintended sites or save files outside the intended video asset folder.

Review this skill before installing. It is intended to download videos into your OpenClaw asset folder, but it should add strict hostname validation, canonical YouTube video ID validation, path containment checks, and reasonable file-size/source controls before use with untrusted URLs or users.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (2)

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/download.sh:15
Finding: Weak YouTube URL Validation Permits Requests to Arbitrary Hosts
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: scripts/download.sh:15
Finding: Unvalidated Video Identifier Is Embedded in the Output Path and yt-dlp Template
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill instructs the agent to download a remote file, save it into the local asset store, and modify a shared registry, but it does not clearly warn the user that local files will be written and persistent state will be changed. That can cause unintended storage consumption, policy violations, or silent persistence of untrusted content, especially because the action is triggered by a simple URL-plus-intent workflow.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.