youtube-downloader

Pass

Audited by Gen Agent Trust Hub on Mar 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically installs the yt-dlp package from the official Python Package Index (PyPI) if the command is not present on the host system.
  • [COMMAND_EXECUTION]: The skill utilizes the subprocess module to interface with the yt-dlp command-line tool for metadata extraction and video downloading. Commands are passed as lists of arguments, which is a secure practice that prevents shell injection vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 6, 2026, 06:39 AM