youtube-downloader
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill script
scripts/download_video.pyautomatically installs third-party Python packages (bgutil-ytdlp-pot-provider,yt-dlp-getpot-wpc) and pulls a Docker image (brainicism/bgutil-ytdlp-pot-provider) from community repositories to handle PO Token generation. - [COMMAND_EXECUTION]: The script uses
subprocess.runto execute external binaries includingyt-dlp,ffprobe,ffmpeg,docker, andpip. While commands are generally constructed using lists to prevent shell injection, the skill relies heavily on the presence and execution of these external tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata from external video platforms (e.g., titles, uploader names, descriptions) through
yt-dlpand YouTube's oEmbed API. This content is rendered in the agent's context, creating a surface for indirect prompt injection attacks where malicious instructions hidden in video metadata could influence agent behavior.
Audit Metadata