Security audit

YouTube Subscription

Security checks across malware telemetry and agentic risk

Overview

This YouTube skill appears purpose-aligned, but it handles OAuth tokens and exposes subscription deletion without enough guardrails for safe agent use.

Install only if you are comfortable giving the CLI access to your YouTube account. Keep client_secret.json and youtube.token.json out of shared folders and version control, restrict file permissions, and require the agent to list and confirm exact subscription IDs before any delete operation.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The guide instructs users to save OAuth client credentials and cached access tokens as local files, but it does not warn that these files are sensitive secrets that can grant API access if exposed. In a skill that manages YouTube subscriptions, token theft could let an attacker act on the user's channel account, including listing, subscribing, and unsubscribing on their behalf.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: This documentation exposes a destructive command that deletes YouTube subscriptions but provides no warning, confirmation guidance, preview step, or recovery note. In an agent skill context, concise imperative docs can be translated directly into automated actions, increasing the chance of accidental bulk unsubscription from a user's account.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.