using-youtube-download
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
This is documentation for using yt-dlp and ffmpeg to download YouTube media. The instructions and requested capabilities match the stated purpose and there is no sign of malicious behavior in the examples themselves. The main security concern is a supply-chain/install risk: the doc suggests downloading a yt-dlp binary from GitHub and placing it into /usr/local/bin without recommending integrity verification. That download-and-install pattern increases risk if the remote release or account is compromised. Apart from that, the commands perform expected network requests to YouTube and write files locally; they do not request credentials or route data to suspicious third parties.
Confidence: 75%Severity: 75%
Audit Metadata