youtube-own-channel-analyzer

Pass

Audited by Gen Agent Trust Hub on Mar 30, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from external sources (video titles and descriptions). If an attacker places malicious instructions in video metadata, the agent could potentially deviate from its analysis task.
  • Ingestion points: Video titles, descriptions, and tags fetched via the search and videos API endpoints.
  • Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands in the processed metadata.
  • Capability inventory: Capabilities are limited to data processing, mathematical calculations, and generating a markdown report. No file system modifications or unauthorized network requests are present.
  • Sanitization: No input sanitization or validation of the fetched video metadata is performed before analysis.
  • [EXTERNAL_DOWNLOADS]: All network references and API endpoints target googleapis.com, which is a well-known and trusted service for YouTube data integration. No unauthorized or suspicious third-party domains are used.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 30, 2026, 07:57 AM