ClawHub

Youtube → Pocket Casts

Security checks across malware telemetry and agentic risk

Overview

This skill does what it says, but it handles sensitive YouTube and Pocket Casts credentials and should be installed only if you are comfortable managing those secrets locally.

Review the shell script before use, install Deno through a trusted method if possible, and treat the Pocket Casts refresh token and YouTube cookies like passwords. Do not share logs from failed runs without checking them for tokens, and revoke or rotate credentials if they are exposed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Low
Confidence
77% confidence
Finding
The description is broad enough that the skill may be invoked for arbitrary YouTube URLs without clear exclusions, safety boundaries, or ownership verification. That ambiguity can lead to unintended use for copyrighted, sensitive, or unauthorized content handling.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The instructions tell users to export highly sensitive browser cookies and a long-lived refresh token, but the privacy and account-takeover risks are understated. Anyone who obtains those artifacts may be able to impersonate the user to YouTube or Pocket Casts for an extended period.

Credential Access

High
Category
Privilege Escalation
Content
--data-raw "{\"grantType\":\"refresh_token\",\"refreshToken\":\"$REFRESH_TOKEN\"}")

ACCESS_TOKEN=$(echo "$TOKEN_RESPONSE" | jq -r '.accessToken')
[[ -n "$ACCESS_TOKEN" && "$ACCESS_TOKEN" != "null" ]] || err "Failed to get access token: $TOKEN_RESPONSE"

log "Got access token"
Confidence
91% confidence
Finding
access token

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal