youtube-downloader
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/download_video.pyinstalls theyt-dlppackage from the official Python package registry (PyPI) at runtime if the utility is not detected in the environment.\n- [COMMAND_EXECUTION]: The skill uses thesubprocessmodule to executeyt-dlpandpipcommands, passing user-supplied URLs and directory paths as command-line arguments.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and displays untrusted metadata from YouTube videos, creating a potential surface for instructions embedded in titles or descriptions to influence the agent.\n - Ingestion points: Metadata is ingested via the
get_video_infofunction inscripts/download_video.pywhich fetches JSON from YouTube.\n - Boundary markers: None; external metadata is printed directly to standard output without delimiters or ignore-instructions.\n
- Capability inventory: The script has filesystem write access to the designated output directory and network access via the
yt-dlputility.\n - Sanitization: No sanitization or validation is applied to video metadata before it is displayed to the user or agent.
Audit Metadata