youtube-channel-breakdown
Warn
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command
python3 channel_research_pipeline.py --channel "@channelhandle"where@channelhandleis provided by the user. This pattern is vulnerable to command injection if the input is not properly sanitized. - [CREDENTIALS_UNSAFE]: The documentation explicitly points to local file paths containing sensitive API credentials, specifically
02_SEO_Research/config/api_credentials.json(YouTube Data API) and06_Tools_APIs/cloudflare_r2/config/r2_config.json(Cloudflare R2 credentials). Accessing these files exposes secrets to the agent context.
Audit Metadata