Youtube Instant Article

• Analyzed: May 12, 2026, 3:03 AM
• Findings: 1
• Version: 0.1.0
• Hash: ba1b78eb427d336a6c5788714279d09e7aa4113f8c2d64a46a84077b359c7404
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to its reliance on broad shell access (`Bash(summarize:*)`, `Bash(curl:*)`, `Bash(jq:*)`) and direct network communication with external services (`catbox.moe`, `api.telegra.ph`, `openai.com`) as defined in `SKILL.md` and implemented in `scripts/generate.sh`. While these capabilities are plausibly needed for the skill's stated purpose (generating articles from YouTube videos), they represent significant high-risk behaviors that could be exploited if the agent or skill were compromised. Additionally, `SKILL.md` specifies a hardcoded path (`/Users/viticci/clawd/.env`) for loading environment variables, which, while intended for configuration, is a specific and potentially non-portable method for accessing sensitive data.