youtube-analytics
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill interacts with the official YouTube Data API v3 provided by Google. This is a well-known service and the data exchange is necessary for the skill's purpose of analyzing channel and video statistics.
- [COMMAND_EXECUTION]: The skill instructions include standard development commands like
npm installandnpx tsxto manage dependencies and execute local TypeScript source code. - [PROMPT_INJECTION]: As the skill ingests content from an external source (YouTube), it possesses an inherent surface for indirect prompt injection from video metadata. 1. Ingestion points: YouTube API responses processed in
scripts/src/index.ts. 2. Boundary markers: None explicitly documented for the markdown summary generation. 3. Capability inventory: The skill has permission to write JSON and Markdown files to the localresults/directory. 4. Sanitization: The skill implements filename sanitization for saved result files.
Audit Metadata