youtube-analytics

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill interacts with the official YouTube Data API v3 provided by Google. This is a well-known service and the data exchange is necessary for the skill's purpose of analyzing channel and video statistics.
  • [COMMAND_EXECUTION]: The skill instructions include standard development commands like npm install and npx tsx to manage dependencies and execute local TypeScript source code.
  • [PROMPT_INJECTION]: As the skill ingests content from an external source (YouTube), it possesses an inherent surface for indirect prompt injection from video metadata. 1. Ingestion points: YouTube API responses processed in scripts/src/index.ts. 2. Boundary markers: None explicitly documented for the markdown summary generation. 3. Capability inventory: The skill has permission to write JSON and Markdown files to the local results/ directory. 4. Sanitization: The skill implements filename sanitization for saved result files.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 05:15 AM