Is franciscoandsam/youtube-voice-summarizer-elevenlabs safe?
This YouTube voice summarizer skill is safe to install. It contains only documentation files with no executable code and makes no attempts at data exfiltration or privilege escalation. The skill instructs agents to interact with a user-deployed local backend service, which is clearly documented and poses minimal risk.
Category Scores
Findings (2)
LOW Local HTTP requests to backend service -15 ▶
The skill instructs the agent to make curl requests to a local backend server at 127.0.0.1:3050. While this is clearly documented and the server runs locally under user control, it represents a potential attack vector if the backend service were compromised.
INFO Requires separate backend service deployment -20 ▶
The skill requires users to deploy and manage a separate backend service with API keys for ElevenLabs, Supadata, and OpenRouter. Security depends on proper configuration and maintenance of this separate service.