YouTube API
Security checks across static analysis, malware telemetry, and agentic risk
Overview
The skill's code, instructions, and required credential align with its stated purpose (calling JustOneAPI to fetch YouTube video and channel data); nothing obviously incoherent or excessive was found.
This skill appears coherent: it needs node and a JUST_ONE_API_TOKEN to call JustOneAPI endpoints and returns JSON results. Before installing, confirm you trust https://api.justoneapi.com (review their docs/privacy) and issue a token with minimal scope. Note the helper sends the token in the URL query string — such tokens can be logged by intermediaries, so avoid using long-lived high-privilege tokens and rotate them if needed. If you require stricter token handling, request or implement use of an Authorization header rather than a query parameter.
SkillSpector
SkillSpector findings are pending for this release.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.