skills/yelban/baoyu-skills.tw/baoyu-youtube-transcript/Socket

baoyu-youtube-transcript

Warn

Audited by Socket on Apr 17, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The skill’s core behavior matches its stated YouTube transcript purpose, and network/data flows are mostly coherent. Main concerns are moderate supply-chain exposure from npx/bun, optional credential forwarding to yt-dlp via browser cookies, and autonomous fallback/install guidance; these make it risky but not malicious.

Confidence: 82%Severity: 56%

Audit Metadata

Analyzed At

Apr 17, 2026, 10:54 AM

Package URL

pkg:socket/skills-sh/yelban%2Fbaoyu-skills.TW%2Fbaoyu-youtube-transcript%2F@d1ea0e804a400ddbe1ad84f2e95fe50f6db8ca13