ClawHub
Back to skill

Security audit

Youtube → Pocket Casts

Security checks across malware telemetry and agentic risk

Overview

The skill performs the advertised YouTube-to-Pocket-Casts upload workflow, but users must handle sensitive account tokens and cookies carefully.

Install only if you are comfortable storing Pocket Casts and YouTube session credentials locally. Treat the refresh token and cookies like passwords, avoid sharing failed-run logs without checking them for secrets, and prefer installing Deno through a trusted package manager instead of piping a remote installer into sh.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
84% confidence
Finding
The skill advertises shell-based behavior and explicit script execution, but the metadata does not declare corresponding permissions or capabilities. This creates a transparency and trust problem: users or platforms cannot accurately assess what the skill will do before use, and hidden shell execution increases the chance of unsafe operations going unnoticed.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs users to extract a Pocket Casts refresh token from browser developer tools and export YouTube session cookies, then store them locally, but it does not clearly warn that these are highly sensitive credentials that can grant account access. If the files are exposed through weak host security, backups, logs, or accidental sharing, an attacker could hijack the associated accounts or abuse the sessions.

Credential Access

High
Category
Privilege Escalation
Content
--data-raw "{\"grantType\":\"refresh_token\",\"refreshToken\":\"$REFRESH_TOKEN\"}")

ACCESS_TOKEN=$(echo "$TOKEN_RESPONSE" | jq -r '.accessToken')
[[ -n "$ACCESS_TOKEN" && "$ACCESS_TOKEN" != "null" ]] || err "Failed to get access token: $TOKEN_RESPONSE"

log "Got access token"
Confidence
78% confidence
Finding
access token

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.