ClawHub
Back to skill

Security audit

YouTube Playlist

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed YouTube playlist manager, but users should treat its OAuth files carefully and confirm IDs before changing or deleting playlists.

Install only if you trust the yutu CLI package and are comfortable granting it YouTube account access. Keep client_secret.json and youtube.token.json private, out of source control and shared workspaces, and require explicit confirmation before creating public playlists, changing privacy settings, or deleting playlist IDs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
90% confidence
Finding
The documentation provides a command for permanently deleting playlists but does not warn that the action is irreversible or encourage verification before execution. In an agent skill context, concise command snippets may be executed with limited user scrutiny, increasing the chance of accidental destructive actions and unintended data loss.

Missing User Warnings

Low
Confidence
90% confidence
Finding
This is a real safety/usability issue because the documentation describes a command that can modify remote YouTube playlist metadata, including privacy settings, without warning the user that the action is state-changing. In an agent or automation context, that omission increases the chance of unintended changes to public/private visibility or playlist content metadata, especially if a user assumes the command is informational rather than mutating.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The guide instructs users to save OAuth client secrets and cached access tokens locally (`client_secret.json` and `youtube.token.json`) but does not warn that these files are sensitive or recommend restrictive permissions and safe storage. In a skill ecosystem where agents may read local files or where users may accidentally commit files to source control, this increases the chance of credential disclosure and subsequent unauthorized YouTube account access.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.