Security audit
Security checks across malware telemetry and agentic risk
This is a useful video summarizer, but it should be reviewed because it can use Chrome browser cookies and send transcript text to external AI services.
Install only after reviewing whether you are comfortable with browser-cookie use and remote LLM processing. Avoid running it on private, confidential, or account-restricted videos unless you control the LLM endpoint, limit the environment tokens available to the process, choose safe output locations, and clean up generated media, transcript, and frame files afterward.
def _download_caption(url: str) -> Optional[str]:
try:
import requests
r = requests.get(url, timeout=15)
if r.status_code == 200 and r.text.strip():
return r.text
except Exception:}
if api_key:
headers["Authorization"] = f"Bearer {api_key}"
response = requests.post(
api_url,
headers=headers,
json={67/67 vendors flagged this skill as clean.
No suspicious patterns detected.