videolink-to-article

• Outcome: Review
• Latest audit: May 28, 2026 · 11:00 AM UTC
• Version: 1.0.0

Overview

The skill does the transcript-extraction work it advertises, but it also asks for persistent tool installation, PATH changes, and browser/session cookie use that deserve manual review.

Install only if you are comfortable with the skill downloading and running BBDown/yt-dlp, modifying your persistent PATH, and using login cookies for restricted videos. Prefer official downloads over mirrors, verify downloaded binaries when possible, avoid persistent PATH changes unless you want them, use cookies only after explicit approval, never paste cookie contents into chat, delete one-off cookie files after use, and run cleanup only inside a newly created per-video output folder.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

Context-Inappropriate Capability

Medium

• Confidence: 90% confidence
• Finding: The guide directs persistent PATH modification as a standard part of installation, which changes the user's shell environment beyond the immediate task of one-off transcript extraction. While not inherently malicious, this creates persistence and broadens the blast radius if the tool directory later contains unexpected binaries or is reused unsafely.

Context-Inappropriate Capability

Medium

• Confidence: 83% confidence
• Finding: Referencing authentication and cookie-based login workflows extends the skill from public subtitle extraction into access to authenticated account data. Even though the details are delegated to another file, this capability increases sensitivity because mishandled cookies or browser-session extraction can expose user accounts or private content.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill instructs deletion of intermediate files after processing without requiring user confirmation or sufficiently constraining what may be deleted beyond a filename pattern. In an agent context, destructive file operations can cause unintended data loss, especially if WORK_DIR is mis-scoped, reused, or points to a directory containing user files.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The instructions encourage downloading executables through third-party proxy/mirror domains without authenticity verification or an explicit trust warning. This materially increases supply-chain risk because a compromised or malicious mirror could deliver trojanized binaries that the user then executes locally.

Missing User Warnings

Low

• Confidence: 87% confidence
• Finding: The PATH persistence steps do alter the user's environment permanently, but the guide only partially communicates that consequence. The main risk is user surprise and accidental command shadowing in future shells, especially if the installed directory later contains additional executables.

YARA rule 'info_stealer': Information stealer patterns (credential harvesting, browser data theft) [malware]

High

• Category: YARA Match

Content

1. **Try `--cookies-from-browser`** (fastest if it works):
   ```powershell
   yt-dlp --cookies-from-browser edge --list-subs --skip-download "<URL>"
   ```
   If this fails with `Could not copy Chrome cookie database` → close all browser instances and retry. If it fails with `Failed to decrypt with DPAPI` (App-Bound Encryption on Chromium ≥ v127), **skip to step 2** — this error is unrecoverable.

• Confidence: 89% confidence
• Finding: cookies-from-browser edge; cookies.txt LOCALLY](https://chrome

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

No suspicious patterns detected.