youtube-channel-api-skill
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script to perform data extraction tasks. This behavior is consistent with the skill's stated purpose of providing automated browser-based data retrieval.
- [DATA_EXFILTRATION]: The script transmits user-defined search keywords and the user's API key to
api.browser-act.com. Because this domain belongs to the skill's author (browser-act), this is classified as standard vendor-related network communication required for the service to function. - [CREDENTIALS_UNSAFE]: The skill implements secure credential handling by using an environment variable (
BROWSERACT_API_KEY). It includes logic to check for the presence of this key and instructs the agent to prompt the user for it if missing, avoiding hardcoded secrets. - [REMOTE_CODE_EXECUTION]: No remote code execution or untrusted script downloads were detected. The Python script uses the standard
requestslibrary for all network operations.
Audit Metadata