yt-research

SUSPICIOUS. The core YouTube research behavior is mostly coherent, but the skill has notable trust and integrity issues: inconsistent publisher identity, copy-pasted generic configuration instructions unrelated to the stated purpose, and optional routing of API credentials through a third-party hosted MCP service. No clear malware or direct exfiltration is present, but the external-content processing plus write/task capabilities make it a medium-risk skill.