ClawHub
Back to skill

Security audit

YouTube Transcript & Summary

Security checks for vulnerabilities and agentic risk

Overview

This skill is a simple YouTube transcript helper with no bundled executable code or high-impact permissions, though it appears incomplete because referenced helper files are missing.

Before installing, understand that the package does not include the helper files it references, so behavior will depend on how the agent fetches transcripts at runtime. Ask for a preferred subtitle language when that matters, especially for multilingual videos.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Natural-Language Policy Violations

Low
Category
Not specified by scanner
Confidence
93% confidence
Finding

The skill states it 'Supports multiple languages (prioritizes Chinese/English)' without indicating that this preference is user-configurable or based on explicit user choice. This can cause the skill to return transcripts in an unintended language, reduce accuracy for multilingual videos, or bias outputs in a way that affects downstream summarization and analysis.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.