Trust Assessment
youtube-summarize received a trust score of 82/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Potential Command Injection via VIDEO_URL, Unpinned Dependency in Manifest.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Potential Command Injection via VIDEO_URL The skill executes shell commands using `yt-dlp` where the `VIDEO_URL` is directly interpolated into the command string. If the LLM does not properly sanitize or escape user-provided input for `VIDEO_URL` before execution, an attacker could inject arbitrary shell commands. For example, a malicious `VIDEO_URL` like `'; rm -rf / --no-preserve-root #'` could lead to arbitrary code execution or system compromise. The LLM execution environment must sanitize all user-provided input, specifically the `VIDEO_URL`, to prevent shell metacharacters from being interpreted as commands. This typically involves proper escaping or quoting of the input string before passing it to the shell. Alternatively, consider using `yt-dlp` as a Python library if the execution environment allows, to avoid shell execution entirely for user-controlled inputs. | LLM | SKILL.md:16 | |
| MEDIUM | Unpinned Dependency in Manifest The skill's manifest specifies `yt-dlp` as a dependency without a version constraint. This means `pip install yt-dlp` will always fetch the latest available version. While this ensures updates, it introduces a supply chain risk where a breaking change, a vulnerability, or even malicious code introduced in a future version of `yt-dlp` could automatically be incorporated into the skill without explicit review or testing, potentially leading to unexpected behavior or security issues. Pin the `yt-dlp` dependency to a specific, known-good version in the manifest (e.g., `"package": "yt-dlp==2023.10.13"`). Regularly review and update the pinned version to incorporate security fixes and new features in a controlled manner. | LLM | SKILL.md:1 |
Scan History
Embed Code
[](https://skillshield.io/report/5880db5f16148c5b)
Powered by SkillShield