Security audit
Security checks for vulnerabilities and agentic risk
This skill fetches a user-requested YouTube transcript and creates a local analysis report; its behavior is mostly coherent, with a notable summary-only option bug and local transcript retention to understand before use.
Install only if you are comfortable with a Chinese/bilingual YouTube transcript workflow that saves a local text report containing transcript content. Do not rely on --summary-only for privacy, because this version still writes transcript text to disk.
The file requires a bilingual summary including a fixed Chinese summary component ("中文200字 + 英文200字"), which imposes a specific language requirement on all users. The policy for this category says to flag language or locale constraints unless the skill offers user choice or clearly justifies the restriction.
The manifest presents the skill entirely in Chinese and explicitly states it produces bilingual summaries, but it does not indicate that language selection is optional or user-configurable. Per the policy, language or locale constraints should either offer user choice or be clearly justified.
The script description, progress messages, and one of the primary outputs are hardcoded in Chinese, and the CLI's optional language argument applies to transcript fetching rather than interface/output locale. This creates a language-policy issue because the skill imposes a specific language without user opt-in or an explicit justified locale restriction.
The script advertises a --summary-only mode but ignores it and still fetches, returns, and persists transcript content. This can violate user expectations and cause unintended retention or disclosure of potentially sensitive transcript data, especially in automation where callers rely on the documented privacy behavior.
The script writes transcript contents to a local file by default without consent, minimization, or warning. Transcript text may contain copyrighted, private, or sensitive information, and automatic persistence increases the chance of accidental disclosure through shared machines, backups, logs, or later processing.
Detected: suspicious.install_untrusted_source
