yt-dlp-downloader

Fail

Audited by Socket on Feb 26, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

Overall, the skill is benign in intent and scope and coherently supports its stated downloading functionality. The main risk drivers are user privacy around cookies and potential misuse of downloaded content, rather than malicious code or exfiltration mechanisms. Treat as a normal, if privacy-conscious, download utility skill.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Feb 26, 2026, 09:22 AM
Package URL
pkg:socket/skills-sh/sundial-org%2Fawesome-openclaw-skills%2Fyt-dlp-downloader%2F@457dd8261889eae626980a9b2de4550190669836