youtube-playlist
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
yutuCLI tool to interact with the YouTube Data API. It executes commands with user-provided parameters to manage playlist data.\n- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions for theyutuutility from sources managed by the author, including GitHub (github.com/eat-pray-ai/yutu) and the NPM registry (@eat-pray-ai/yutu).\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it reads and processes external data (playlist titles and descriptions) from the YouTube API.\n - Ingestion points: Data retrieved by
yutu playlist list(referenced in SKILL.md and references/playlist-list.md).\n - Boundary markers: No specific boundary markers or instructions to ignore embedded commands were found in the skill text.\n
- Capability inventory: The skill can execute shell commands via the
yututool to create, update, or delete playlists (referenced in references/playlist-insert.md, references/playlist-update.md, and references/playlist-delete.md).\n - Sanitization: No evidence of sanitization or validation of the content retrieved from the YouTube API was observed.
Audit Metadata