Skills youtube-video-api-skill

📦

youtube-video-api-skill

Name: youtube-video-api-skill
Author: browser-act

Content revision r2 Safe 🌐 Network access🔑 Env variables⚙️ External commands

Extract YouTube Channel and Video Metrics

Manual collection of YouTube channel metrics is slow and inconsistent. This skill runs a BrowserAct workflow and returns structured channel and video details.

Supports: Claude Codex Code(CC)

📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "youtube-video-api-skill" from https://skillstore.io/skills/browser-act-youtube-video-api-skill.md and its manifest at https://skillstore.io/api/skills/browser-act-youtube-video-api-skill/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/browser-act-youtube-video-api-skill.md Signed manifest GET /api/skills/browser-act-youtube-video-api-skill/manifest Signed lockfile GET /api/skills/browser-act-youtube-video-api-skill/lockfile

Test it

Using "youtube-video-api-skill". Find popular videos for a public YouTube channel.

Expected outcome:

Channel summary: title, URL, and subscriber count.
Video list: title, URL, publish date, views, duration, comments, and likes.

Using "youtube-video-api-skill". Review the latest uploads and note any unavailable metrics.

Expected outcome:

A readable latest-upload report with current page values and clear labels for metrics that YouTube did not expose.

Security Audit

Safe

v6 • 7/23/2026 Open versioned report

The script makes expected HTTPS requests to the fixed BrowserAct workflow API, while most static flags are Markdown formatting or ordinary credential handling. However, both the guidance and missing-key output invite users to provide an API key to the agent, which can expose the credential in chat or model context. The key should only be configured through a local secret mechanism.

Files scanned

197

Lines analyzed

Review items

False positives ignored

Capability review items (5)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

High

scripts/youtube_video_api.py:98

Generic API/secret keys

print("3. Provide it to me or set it as an environment variable (BROWSERACT_API_KEY).", flush=True)

The missing-key message tells the user to provide the API key to the agent. Sharing a credential through chat or model context can expose it beyond the local environment.

High

SKILL.md:20

Generic API/secret keys

Before running, you must check the `BROWSERACT_API_KEY` environment variable. If it is not set, do n

The guidance instructs the agent to request and wait for the user to provide an API key. This encourages credential disclosure into conversational and model context.

Low

scripts/youtube_video_api.py:30

Python HTTP libraries

res = requests.post(f"{API_BASE_URL}/run-task-by-template", json=payload, headers=headers, timeout=3

The script sends the channel URL, ordering mode, and bearer credential to the BrowserAct workflow API. This is intended functionality, but it is a real third-party network transmission.

Low

scripts/youtube_video_api.py:47

Python HTTP libraries

status_res = requests.get(f"{API_BASE_URL}/get-task-status?task_id={task_id}", headers=headers, time

The script polls BrowserAct over HTTPS and includes the bearer credential in each request. The destination is fixed and expected, but outbound authenticated traffic is present.

Low

scripts/youtube_video_api.py:70

Python HTTP libraries

task_info = requests.get(f"{API_BASE_URL}/get-task?task_id={task_id}", headers=headers, timeout=30).

The script retrieves workflow results from BrowserAct over HTTPS with an authorization header. This expected external request creates a third-party data exposure boundary.

Risk Factors

🌐 Network access (7)

scripts/youtube_video_api.py:30 scripts/youtube_video_api.py:47 scripts/youtube_video_api.py:70 scripts/youtube_video_api.py:15 scripts/youtube_video_api.py:96 SKILL.md:22 SKILL.md:30

🔑 Env variables (10)

scripts/youtube_video_api.py:87 scripts/youtube_video_api.py:87 scripts/youtube_video_api.py:17 scripts/youtube_video_api.py:18 scripts/youtube_video_api.py:87 scripts/youtube_video_api.py:93 scripts/youtube_video_api.py:98 scripts/youtube_video_api.py:104 SKILL.md:4 SKILL.md:20

⚙️ External commands (23)

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/browser-act-youtube-video-api-skill/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/browser-act-youtube-video-api-skill/security.svg)](https://skillstore.io/skills/browser-act-youtube-video-api-skill?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/browser-act-youtube-video-api-skill?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/browser-act-youtube-video-api-skill/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/browser-act-youtube-video-api-skill.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

browser-act. (2026). youtube-video-api-skill security audit report (audit version 6) [Author version unspecified]. Skillstore. https://skillstore.io/skills/browser-act-youtube-video-api-skill/audits/6

BibTeX citation

@techreport{browser-act-browser-act-youtube-video-api-skill-2026,
  author = {browser-act},
  title = {youtube-video-api-skill security audit report (audit version 6)},
  institution = {Skillstore},
  year = {2026},
  number = {6},
  url = {https://skillstore.io/skills/browser-act-youtube-video-api-skill/audits/6},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "youtube-video-api-skill security audit report (audit version 6)"
version: "unspecified"
type: report
authors:
  - name: "browser-act"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/browser-act-youtube-video-api-skill/audits/6"
identifiers:
  - type: other
    value: "skillstore:browser-act-youtube-video-api-skill:audit:6"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review Competitor Videos

Collect popular uploads and visible engagement metrics from a competitor channel for content planning.

Monitor Recent Uploads

Gather the latest videos and channel details for a recurring creator performance report.

Study Channel Development

Retrieve earliest uploads to examine how a public channel began and changed over time.

Try These Prompts

Get Popular Videos

Extract popular videos from [YouTube channel URL]. Summarize the channel details and list the available metrics for each video.

Review Latest Uploads

Retrieve the latest videos from [YouTube channel URL]. Present publication dates, views, comments, likes, and durations in a readable table.

Analyze Earliest Content

Retrieve the earliest videos from [YouTube channel URL]. Identify recurring topics and summarize visible engagement patterns without inventing missing values.

Compare Ordering Views

Run Latest and Popular requests for [YouTube channel URL]. Compare overlapping videos, posting cadence, and visible engagement, while marking unavailable metrics.

Best Practices

Set BROWSERACT_API_KEY through a local secret manager or environment configuration.
Use a canonical public channel URL and an allowed ordering value.
Verify changing metrics and relative publication dates before making decisions.

Avoid

Do not paste API keys into prompts, chat messages, or command arguments.
Do not treat missing comment or like counts as zero.
Do not assume one ordering mode provides a complete channel comparison.

Frequently Asked Questions

What authentication is required?

A valid BrowserAct API key must be available through the BROWSERACT_API_KEY environment variable.

Which channel links can I use?

Provide a public YouTube channel URL that BrowserAct and YouTube can access.

Which video ordering modes are supported?

The workflow accepts Latest, Popular, or Earliest. Popular is the script default.

What data can the skill return?

It can return channel details and visible video titles, dates, views, durations, comments, and likes.

How long can a request take?

The script polls for up to five minutes. Browser automation and network conditions can affect completion time.

Does this use the official YouTube Data API?

No. It runs a BrowserAct workflow that gathers values shown on YouTube pages.

Developer Details

Author

browser-act

License

MIT

Skillstore revision

Version notice

The author did not declare a version.

Repository

https://github.com/browser-act/skills/tree/main/solutions/video-platforms/youtube-video-api-skill

Ref

a39a91716eadede5f4cdefd78178fed4e837a128

Maintenance freshness

7/24/2026

Usage

5 downloads · 117 views

File structure

📁 scripts/

📄 youtube_video_api.py

📄 SKILL.md