Skills youtube-summarizer

📦

youtube-summarizer

Name: youtube-summarizer
Author: Eric Andrade

v1.2.1 Content revision r1 High Risk ⚙️ External commands🌐 Network access📁 Filesystem access

Summarize YouTube Videos into Detailed Notes

Long videos are hard to review and cite later. This skill extracts YouTube transcripts and creates structured summaries for research, learning, and documentation.

Supports: Claude Codex Code(CC)

⚠️ 38 Poor

Stop for confirmation before installing.

Review the plan and obtain explicit user consent before changing files.

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "youtube-summarizer" from https://skillstore.io/skills/sickn33-youtube-summarizer.md and its manifest at https://skillstore.io/api/skills/sickn33-youtube-summarizer/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/sickn33-youtube-summarizer.md Signed manifest GET /api/skills/sickn33-youtube-summarizer/manifest Signed lockfile GET /api/skills/sickn33-youtube-summarizer/lockfile

Test it

Using "youtube-summarizer". A public lecture video about machine learning basics.

Expected outcome:

Executive summary of the lecture topic and audience.
Detailed sections for core ideas, examples, and terminology.
Final takeaways and suggested follow-up questions.

Using "youtube-summarizer". A developer tutorial video with captions enabled.

Expected outcome:

Step-by-step tutorial summary.
Important commands and decisions mentioned by the presenter.
Troubleshooting notes and practical warnings.

Using "youtube-summarizer". A YouTube URL without available transcripts.

Expected outcome:

The skill reports that no transcript is available and asks the user to try another public video with captions.

Security Audit

High Risk

v4 • 7/7/2026 Open versioned report

Most static findings are false positives from Markdown examples, code fences, URLs, and installation documentation. Confirmed risks remain around predictable /tmp transcript files, untrusted transcript text being fed to an AI summarization prompt, and automatic third-party package installation. No prompt injection control text was found in the skill files.

Files scanned

940

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (2)

High

SKILL.md:223-235 SKILL.md:264-266

Untrusted Transcript Prompt Injection Surface

The skill extracts YouTube transcript text and directs the AI model to use it as summarization input without defining an untrusted-content boundary. A malicious transcript could contain instructions that try to override the summarization workflow.

The workflow joins transcript text and applies an AI prompt to it. The reviewed sections do not instruct the agent to ignore instructions embedded inside transcript content.

Medium

scripts/install-dependencies.sh:8-13 README.md:50-60

Automatic Third-Party Package Installation

The installer runs pip or pip3 to install youtube-transcript-api in the active environment. This is expected functionality, but it pulls third-party code and changes the user environment.

The shell script directly invokes pip3 install or pip install. The README also describes automatic dependency installation as normal behavior.

Capability review items (3)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

SKILL.md:234

Temp directory access

with open(f"/tmp/transcript_{video_id}.txt", "w") as f:

The workflow writes transcript text to a predictable /tmp path built from video_id, which comes from user-provided URL parsing. Predictable temp paths and unvalidated identifiers can cause file clobbering or path misuse.

Medium

SKILL.md:279

Temp directory access

TRANSCRIPT_FILE="/tmp/transcript_${VIDEO_ID}.txt"

The workflow later reads /tmp/transcript_${VIDEO_ID}.txt, recomputing a path from the same unvalidated identifier. This keeps the unsafe predictable temp-file pattern in the data flow.

Medium

SKILL.md:234

Python file write/append

with open(f"/tmp/transcript_{video_id}.txt", "w") as f:

The Python example opens /tmp/transcript_{video_id}.txt for writing with an identifier derived from user input. This is a real unsafe file-write pattern unless the ID is strictly validated and a safe temp-file API is used.

Risk Factors

⚙️ External commands (55)

README.md:321 scripts/install-dependencies.sh:18 scripts/install-dependencies.sh:19 SKILL.md:18 SKILL.md:37-50 SKILL.md:50-54 SKILL.md:54-60 SKILL.md:60-64 SKILL.md:64-66 SKILL.md:66-70 SKILL.md:70-72 SKILL.md:72-80 SKILL.md:80-82 SKILL.md:82-92 SKILL.md:92-104 SKILL.md:104-111 SKILL.md:111-112 SKILL.md:112-113 SKILL.md:113-114 SKILL.md:114-118 SKILL.md:118-134 SKILL.md:134-138 SKILL.md:138-146 SKILL.md:146-151 SKILL.md:151-153 SKILL.md:153-159 SKILL.md:159-188 SKILL.md:188-202 SKILL.md:202-204 SKILL.md:204-210 SKILL.md:210-240 SKILL.md:240-252 SKILL.md:252-254 SKILL.md:254-277 SKILL.md:277-288 SKILL.md:288-295 SKILL.md:295-297 SKILL.md:297-303 SKILL.md:303-341 SKILL.md:341-343 SKILL.md:343-347 SKILL.md:347-355 SKILL.md:355-359 SKILL.md:359-364 SKILL.md:364-370 SKILL.md:370-372 SKILL.md:372-376 SKILL.md:376-384 SKILL.md:384-392 SKILL.md:392-396 SKILL.md:396-402 SKILL.md:402-406 SKILL.md:124 SKILL.md:127 SKILL.md:118-134

🌐 Network access (23)

📁 Filesystem access (14)

README.md:352 README.md:325 README.md:326 README.md:325 README.md:326 README.md:334 scripts/install-dependencies.sh:8 scripts/install-dependencies.sh:11 scripts/install-dependencies.sh:24 SKILL.md:39 SKILL.md:46 SKILL.md:234 SKILL.md:279 SKILL.md:234

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/sickn33-youtube-summarizer/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/sickn33-youtube-summarizer/security.svg)](https://skillstore.io/skills/sickn33-youtube-summarizer?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/sickn33-youtube-summarizer?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-youtube-summarizer/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/sickn33-youtube-summarizer.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

Eric Andrade. (2026). youtube-summarizer security audit report (audit version 4) [Author version 1.2.1]. Skillstore. https://skillstore.io/skills/sickn33-youtube-summarizer/audits/4

BibTeX citation

@techreport{eric-andrade-sickn33-youtube-summarizer-2026,
  author = {Eric Andrade},
  title = {youtube-summarizer security audit report (audit version 4)},
  institution = {Skillstore},
  year = {2026},
  number = {4},
  url = {https://skillstore.io/skills/sickn33-youtube-summarizer/audits/4},
  note = {Author version 1.2.1}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "youtube-summarizer security audit report (audit version 4)"
version: "1.2.1"
type: report
authors:
  - name: "Eric Andrade"
date-released: "2026-07-07"
url: "https://skillstore.io/skills/sickn33-youtube-summarizer/audits/4"
identifiers:
  - type: other
    value: "skillstore:sickn33-youtube-summarizer:audit:4"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Study Lecture Videos

Convert a public lecture transcript into organized notes with key concepts, terminology, and conclusions.

Document Technical Tutorials

Turn a tutorial transcript into a step-by-step reference for commands, decisions, and troubleshooting points.

Review Research Talks

Capture claims, methods, examples, and follow-up questions from conference talks or expert interviews.

Try These Prompts

Summarize One Video

Summarize this YouTube video: [URL]. Include the main ideas, key terms, and final takeaways.

Extract Transcript First

Extract the transcript from this YouTube video: [URL]. Then create a concise summary with important timestamps when available.

Create Study Notes

Summarize this lecture: [URL]. Organize the output as study notes with concepts, definitions, examples, and review questions.

Analyze a Technical Talk

Analyze this technical talk: [URL]. Identify the thesis, evidence, tradeoffs, assumptions, risks, and practical next steps.

Best Practices

Use public videos with reliable captions for the best transcript quality.
Ask for the summary format you need before processing the transcript.
Review generated notes against the original video before citing them.

Avoid

Do not use it for private, restricted, or transcript-disabled videos.
Do not treat generated summaries as exact quotations from the speaker.
Do not run automatic dependency installation without reviewing the environment impact.