youtube-publisher
Pass
Audited by Gen Agent Trust Hub on Feb 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs necessary and standard dependencies, including the official Google API client (
googleapis) and configuration tools (dotenv), from the npm registry mirror (registry.npmmirror.com). - [CREDENTIALS_UNSAFE]: The skill requires Google OAuth2 credentials to function. It provides instructions for users to store Client IDs and Secrets in a
.envfile and locally caches authentication tokens in a file named.youtube-token.json. This is standard behavior for desktop-based API tools and does not involve unauthorized data exposure. - [COMMAND_EXECUTION]: Provides functionality to execute TypeScript scripts via
ts-nodefor the purpose of processing local video files and uploading them with user-defined metadata (titles, descriptions, tags) to YouTube.
Audit Metadata