boring-youtube-mining

Fail

Audited by Socket on Mar 9, 2026

1 alert found:

Obfuscated File
Obfuscated FileHIGH
SKILL.md

The skill's footprint is coherent with a content research tool: it reads channel configurations, fetches recent YouTube video data and transcripts via yt-dlp, caches transcripts, generates structured ideas, and saves outputs locally. There are no credential requirements, outbound data transfers, or execution of untrusted binaries initiated by the skill itself. Overall, the security posture is benign with low risk; main considerations are content rights and adherence to platform terms rather than security threats.

Confidence: 98%
Audit Metadata
Analyzed At
Mar 9, 2026, 09:23 PM
Package URL
pkg:socket/skills-sh/MrPaulScrivens%2FBoring-Zoo%2Fboring-youtube-mining%2F@6b04a9bd243062c701881a0da2d5dfcb8b7dc2a6