Skills youtube-channel-api-skill
📦

youtube-channel-api-skill

Content revision r2 Safe 🌐 Network access🔑 Env variables⚙️ External commands

Discover YouTube Channels with Structured Data

Finding relevant YouTube creators manually takes time and produces inconsistent records. This skill searches through BrowserAct and returns structured channel details.

Supports: Claude Codex Code(CC)
📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "youtube-channel-api-skill" from https://skillstore.io/skills/browser-act-youtube-channel-api-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-youtube-channel-api-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/browser-act-youtube-channel-api-skill.md Signed manifest GET /api/skills/browser-act-youtube-channel-api-skill/manifest Signed lockfile GET /api/skills/browser-act-youtube-channel-api-skill/lockfile

Test it

Using "youtube-channel-api-skill". Find channels about home automation with uploads this week.

Expected outcome:

The result lists matching channel names, links, handles, subscriber counts, verification status, descriptions, and thumbnail links.

Using "youtube-channel-api-skill". Research YouTube channels covering sustainable packaging.

Expected outcome:

  • Channel: Circular Design Weekly, with its handle and channel link.
  • Audience: The available subscriber count and verification status.
  • Profile: A short channel description and thumbnail link.

Using "youtube-channel-api-skill". Find active cybersecurity education channels for outreach.

Expected outcome:

A prioritized summary identifies relevant channels and compares available audience, verification, profile, and activity information.

Security Audit

Safe
v12 • 7/23/2026 Open versioned report

The skill makes disclosed HTTPS requests to BrowserAct and reads one purpose-specific environment variable. Most static findings are documentation or identifier matches, but instructions to provide an API key through the agent interaction create a credible credential exposure risk.

2
Files scanned
189
Lines analyzed
8
Review items
0
False positives ignored
Capability review items (8)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High
scripts/youtube_channel_api.py:98
Generic API/secret keys
print("3. Provide it to me or set it as an environment variable (BROWSERACT_API_KEY).", flush=True)
The script tells the user to provide the API key to the agent, which can expose the secret in conversation history. Users should only configure it through a local secret channel.
High
SKILL.md:20
Generic API/secret keys
Before running, you must first check the `BROWSERACT_API_KEY` environment variable. If it is not set
The instruction requires the agent to request and wait for the user's API key when the variable is missing. That solicits a secret through the conversation channel.
Medium
SKILL.md:41-44
Ruby/shell backtick execution
```bash
The fenced block directs the agent to run a Python command with a user-selected search argument. It is legitimate functionality, but unsafe interpolation could permit shell metacharacter injection.
Low
scripts/youtube_channel_api.py:30
Python HTTP libraries
res = requests.post(f"{API_BASE_URL}/run-task-by-template", json=payload, headers=headers, timeout=3
The script sends the search parameters and bearer credential to the declared BrowserAct API. This is expected functionality, but it is a real third-party network transfer.
Low
scripts/youtube_channel_api.py:47
Python HTTP libraries
status_res = requests.get(f"{API_BASE_URL}/get-task-status?task_id={task_id}", headers=headers, time
The script polls BrowserAct over HTTPS with the task identifier and bearer credential. This is expected but confirms outbound network access involving a secret.
Low
scripts/youtube_channel_api.py:70
Python HTTP libraries
task_info = requests.get(f"{API_BASE_URL}/get-task?task_id={task_id}", headers=headers, timeout=30).
The script retrieves task results from BrowserAct over HTTPS using the bearer credential. The request is disclosed and purpose-specific, but the network transfer is real.
Low
scripts/youtube_channel_api.py:87
Python getenv function
api_key = os.getenv("BROWSERACT_API_KEY")
The script reads BROWSERACT_API_KEY from the process environment. Access is limited to the declared credential, but it is genuine secret-bearing environment access.
Low
scripts/youtube_channel_api.py:87
getenv function call
api_key = os.getenv("BROWSERACT_API_KEY")
The getenv call reads the declared BrowserAct credential. It does not enumerate other variables, but the detected environment access is real.

Risk Factors

🌐 Network access (6)
scripts/youtube_channel_api.py:30 scripts/youtube_channel_api.py:47 scripts/youtube_channel_api.py:70 scripts/youtube_channel_api.py:15 scripts/youtube_channel_api.py:96 SKILL.md:22
🔑 Env variables (10)
scripts/youtube_channel_api.py:87 scripts/youtube_channel_api.py:87 scripts/youtube_channel_api.py:17 scripts/youtube_channel_api.py:18 scripts/youtube_channel_api.py:87 scripts/youtube_channel_api.py:93 scripts/youtube_channel_api.py:98 scripts/youtube_channel_api.py:104 SKILL.md:4 SKILL.md:20
⚙️ External commands (18)
SKILL.md:20 SKILL.md:28 SKILL.md:30 SKILL.md:33 SKILL.md:35 SKILL.md:36 SKILL.md:41-44 SKILL.md:44-47 SKILL.md:47-55 SKILL.md:55-56 SKILL.md:56-57 SKILL.md:57-58 SKILL.md:58-59 SKILL.md:59-60 SKILL.md:60-61 SKILL.md:61-67 SKILL.md:67-68 SKILL.md:68
Audited by: codex View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/browser-act-youtube-channel-api-skill/audits/12?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/browser-act-youtube-channel-api-skill/security.svg)](https://skillstore.io/skills/browser-act-youtube-channel-api-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/browser-act-youtube-channel-api-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-youtube-channel-api-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/browser-act-youtube-channel-api-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

browser-act. (2026). youtube-channel-api-skill security audit report (audit version 12) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-youtube-channel-api-skill/audits/12

BibTeX citation

@techreport{browser-act-browser-act-youtube-channel-api-skill-2026, author = {browser-act}, title = {youtube-channel-api-skill security audit report (audit version 12)}, institution = {Skillstore}, year = {2026}, number = {12}, url = {https://skillstore.io/skills/browser-act-youtube-channel-api-skill/audits/12}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "youtube-channel-api-skill security audit report (audit version 12)" version: "unspecified" type: report authors: - name: "browser-act" date-released: "2026-07-23" url: "https://skillstore.io/skills/browser-act-youtube-channel-api-skill/audits/12" identifiers: - type: other value: "skillstore:browser-act-youtube-channel-api-skill:audit:12" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
45
Architecture
85
Maintainability
87
Content
68
Community
83
Spec Compliance

What You Can Build

Build a creator shortlist

Find active channels in a campaign niche and compare available audience details.

Map competing channels

Collect channels related to products, topics, or competing brands for landscape research.

Source expert channels

Discover relevant channels for partnerships, interviews, or content monitoring.

Try These Prompts

Find channels by topic 
Find YouTube channels about [topic] with the upload date set to Any time. Summarize the available channel details.
Find recently active creators 
Search for YouTube channels about [topic] that published within [upload date]. Highlight verified channels and subscriber counts.
Research a competitive niche 
Search for channels related to [niche or competitor]. Group the results by audience size and note relevant descriptions.
Create an outreach shortlist 
Find channels for [campaign theme] using [upload date]. Rank suitable outreach candidates using verification, subscribers, descriptions, and recent activity.

Best Practices

  • Set BROWSERACT_API_KEY through a local environment or approved secret manager.
  • Use focused keywords and an upload date that matches the research objective.
  • Review channel links and current metrics before making outreach or investment decisions.

Avoid

  • Do not paste API keys into prompts, messages, command arguments, or saved output.
  • Do not treat subscriber counts or verification status as proof of audience quality.
  • Do not retry authorization failures without correcting the credential.

Frequently Asked Questions

What credential does this skill require?
It requires a BrowserAct API key configured as BROWSERACT_API_KEY in the local environment.
Should I provide my API key in chat?
No. Configure the key through a local environment or an approved secret manager.
What search filters are supported?
The script accepts search keywords and an optional upload date value.
How long can a search take?
The script polls for up to five minutes and reports status every ten seconds.
Which channel fields can be returned?
Results can include title, link, handle, verification status, subscribers, description, and thumbnail.
What happens when the task fails?
The script reports connection, task, retrieval, or timeout errors. The skill documentation allows one retry for non-authorization failures.

Developer Details

License

MIT

Skillstore revision

r2

Version notice

The author did not declare a version.

Repository

https://github.com/browser-act/skills/tree/main/solutions/video-platforms/youtube-channel-api-skill

Ref

a39a91716eadede5f4cdefd78178fed4e837a128

Maintenance freshness

7/24/2026

Usage

4 downloads · 93 views

File structure

📁 scripts/

📄 youtube_channel_api.py

📄 SKILL.md