yby6-video-parser

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/skill.py

This file primarily orchestrates parsing and downloading of user-supplied video URLs via imported modules. It contains no clear malicious logic itself (no exec/subprocess/backdoor/exfiltration). The main security risks visible in this fragment are (1) untrusted URL-driven network access and file writes delegated to other modules, (2) unsafe deletion risk if returned temp_dir is ever not a trusted temp location (no containment/allowlist checks before shutil.rmtree), and (3) an unusual load_env shadowing anomaly that could cause inconsistent behavior. Overall risk depends heavily on the imported parser/downloader/transcribe modules for URL validation, destination allowlisting, and temp directory safety.

Confidence: 62%Severity: 55%
Audit Metadata
Analyzed At
Mar 29, 2026, 05:05 AM
Package URL
pkg:socket/skills-sh/yangbuyiya%2Fyby6-video-parser-skill%2Fyby6-video-parser%2F@b3eb3d4525678390bde4d9a3fd7823b3bad3f5bb