youtube-downloader

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/download_video.py installs the yt-dlp package from the official Python package registry (PyPI) at runtime if the utility is not detected in the environment.\n- [COMMAND_EXECUTION]: The skill uses the subprocess module to execute yt-dlp and pip commands, passing user-supplied URLs and directory paths as command-line arguments.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and displays untrusted metadata from YouTube videos, creating a potential surface for instructions embedded in titles or descriptions to influence the agent.\n
  • Ingestion points: Metadata is ingested via the get_video_info function in scripts/download_video.py which fetches JSON from YouTube.\n
  • Boundary markers: None; external metadata is printed directly to standard output without delimiters or ignore-instructions.\n
  • Capability inventory: The script has filesystem write access to the designated output directory and network access via the yt-dlp utility.\n
  • Sanitization: No sanitization or validation is applied to video metadata before it is displayed to the user or agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:05 AM
Security Audit — agent-trust-hub — youtube-downloader