OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit May 15, 2026
Independent checks from skills.sh's audit partners.
This skill provides a utility to download video transcripts and media files. It includes a command-line passthrough feature that allows arbitrary flags to be sent to the yt-dlp binary, which can be used to execute shell commands. Additionally, it fetches external transcripts, presenting an indirect prompt injection surface.
Detected behaviors
No alerts
1 issue
5/5 files flagged
Score: 93/100 · 2 sections analyzed