OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Sep 15, 2026
Independent checks from skills.sh's audit partners.
The skill downloads YouTube videos using the yt-dlp tool and can automatically install it from the official Python package registry if missing. There is a low risk of indirect prompt injection if an agent reads malicious video metadata such as titles.
Detected behaviors
2 alerts: gptAnomaly
1 issue
2 files scanned · No issues
Score: 93/100 · 2 sections analyzed