ClawHub
Back to skill

Security audit

YouTube Caption

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward YouTube caption-management skill, but it can upload, update, or delete captions through your Google account.

Install only if you trust the yutu CLI and are comfortable granting YouTube API access. Keep client_secret.json and youtube.token.json out of shared folders and source control, and confirm the Google account, video ID, caption ID, and local caption file before insert, update, publish, or delete commands.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
This documentation instructs users how to delete YouTube captions but does not warn that the action is destructive or potentially irreversible. In an agent-assisted context, terse operational docs can cause a user or automated workflow to remove captions unintentionally, leading to loss of accessibility content or service disruption for published videos.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The documentation instructs users how to insert captions but does not clearly warn that the command uploads a local file to YouTube and changes caption state for the specified video. In an agent context, this omission can lead to unintended external data transfer and modification of production content, especially if a user assumes the action is local or read-only.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The setup guide instructs users to save OAuth client credentials and a cached access token locally, but it does not warn that these files are sensitive or recommend secure storage practices. If these files are left in a shared directory, committed to source control, or exposed through backups/logs, an attacker could reuse them to access the user's YouTube account via the API.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.