Security audit

YouTube Playlist

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it says, but it can use YouTube OAuth tokens to create, update, and delete account playlists without enough safety guidance.

Review this before installing if your YouTube account or channel playlists matter. Keep client_secret.json and youtube.token.json private, do not commit them to source control, and only allow delete or update commands after checking the exact playlist IDs and intended account/channel.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (8)

Credential Access

High

Category: Privilege Escalation
Content: bins: - yutu config: - client_secret.json - youtube.token.json primaryEnv: YUTU_CREDENTIAL emoji: "\U0001F3AC\U0001F430"
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Credential Access

High

Category: Privilege Escalation
Content: bins: - yutu config: - client_secret.json - youtube.token.json primaryEnv: YUTU_CREDENTIAL emoji: "\U0001F3AC\U0001F430"
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Credential Access

High

Category: Privilege Escalation
Content: bins: - yutu config: - client_secret.json - youtube.token.json primaryEnv: YUTU_CREDENTIAL emoji: "\U0001F3AC\U0001F430"
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Credential Access

High

Category: Privilege Escalation
Content: bins: - yutu config: - client_secret.json - youtube.token.json primaryEnv: YUTU_CREDENTIAL emoji: "\U0001F3AC\U0001F430"
Confidence: 70% confidence
Finding: Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The manifest description advertises delete playlist operations, but it does not warn that deletion is destructive or potentially irreversible. For markdown files, safety-relevant behaviors affecting user data should be disclosed so users understand the impact before invoking the skill.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The markdown lists a delete operation but provides no caution that it modifies or removes user-owned YouTube data. This omission can leave users unaware of the risk to their data or account content when using the skill.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: This documentation describes a destructive operation that permanently deletes YouTube playlists but provides no warning about irreversibility, scope, or the risk of deleting the wrong resource. In an agent-skill context, concise command examples may be executed with minimal user scrutiny, so omission of safety guidance materially increases the chance of accidental destructive actions.

Missing User Warnings

Medium

Confidence: 97% confidence
Finding: The guide instructs users to create `client_secret.json` and `youtube.token.json` but does not warn that these files are sensitive OAuth credentials and bearer tokens that grant access to the user's YouTube account. In setup documentation for an automation skill, omission of credential-handling guidance increases the chance users store, share, or commit these files insecurely, enabling account compromise if exposed.

Static analysis

No suspicious patterns detected.