ClawHub
Back to skill

Security audit

YouTube Video Details API

Security checks across malware telemetry and agentic risk

Overview

The skill appears to perform the claimed YouTube video lookup, but it handles the required API token in ways that can expose the credential.

Review before installing. Use only a limited, revocable JustOneAPI token, avoid running this on shared systems, and assume the token may appear in process telemetry or request URLs. Prefer a version that reads the token directly from secure environment handling and sends it in an Authorization header if the provider supports that.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Missing User Warnings

Medium
Confidence
96% confidence
Finding
Passing an access token as a query parameter is dangerous because query strings are commonly logged by clients, proxies, gateways, browser histories, and monitoring systems. Even when sent over HTTPS, the token may be exposed through operational logging or telemetry, creating a credential leakage risk.

Vague Triggers

Low
Confidence
83% confidence
Finding
The operation description defines a broadly callable external API action without stating when it should or should not be used, what inputs are acceptable, or any guardrails around user authorization and data handling. In an agent setting, underspecified scope can lead to overbroad or unnecessary API calls, increasing the chance of unintended data disclosure or misuse of the provided token.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The parameter list requires a token for an external API service but does not warn that the token will be transmitted to a third-party endpoint. In an agent workflow, missing this disclosure can cause users or upstream systems to provide sensitive credentials without understanding where they are sent, creating credential exposure and trust risks.

Credential Access

High
Category
Privilege Escalation
Content
"parameters": [
        {
          "defaultValue": null,
          "description": "Access token for this API service.",
          "enumValues": [],
          "location": "query",
          "name": "token",
Confidence
93% confidence
Finding
Access token

VirusTotal

62/62 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.secret_argv_exposure

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.md:41