youtube-downloader
Warn
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's Python script automatically downloads and installs the
yt-dlppackage from PyPI at runtime usingpip installif it is not already present on the system. - Evidence:
subprocess.run([sys.executable, "-m", "pip", "install", "--break-system-packages", "yt-dlp"], check=True)inscripts/download_video.py. - [COMMAND_EXECUTION]: The skill uses the
subprocess.runfunction to execute system commands, including the installation of software and the execution of the downloadedyt-dlptool with user-supplied arguments (URL and output path). - Evidence: Multiple
subprocess.runcalls inscripts/download_video.pyto check, install, and runyt-dlp.
Audit Metadata