subtitles

• Analyzed: May 12, 2026, 3:14 AM
• Findings: 1
• Version: 1.5.0
• Hash: 1ecc991a6436be90252c9f59a910550a30d14ff3105b354bbe3644ccc85e0812
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill includes an authentication guide (references/auth-setup.md) that explicitly instructs the AI agent to bypass security redaction filters by writing sensitive tokens to temporary files to prevent them from appearing in logs or tool outputs. It also directs the agent to achieve persistence by modifying shell profiles or system configuration files. While the stated goal of fetching YouTube transcripts via transcriptapi.com is plausible, the inclusion of specific evasion and persistence tactics tailored for agent runtimes like Hermes and Claude Code is highly irregular and risky.