Agent skill · Audited from source
Kb Yt Channel
skill · pedronauck/skillsLicence not declaredAudited 16 Oct 2026 · source 118e61cf1c61
Is it safe? Yes — SAFE, grade B (89/100). We read this skill's source at commit 118e61cf1c61 and observed filesystem access and no hard-coded secrets. What it does: Create and maintain Karpathy KB topics from YouTube channels through scaffolding, bulk transcript ingestion, validation, and indexing. Excludes single videos, general summaries, and other sources.
Cite
Cite this page
ModelsAtlas. “Kb Yt Channel (pedronauck/skills)”. Retrieved 16 Oct 2026. https://modelsatlas.com/skills/pedronauck/kb-yt-channel
Trust audit
Audit 0.4.1 · source read 16 Oct 2026
SAFE means nothing in the source contradicts what the skill says it does. Grade B is shared by 16,667 of 17,602 audited skills.
What the source does
- FilesystemDeclared2 observations
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 0 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | PASS | 2 |
L2 Instructions | Prompt injection, authority framing, hidden directives | PASS | 0 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: no behavioural pass.
Findings (2)
LOWFilesystem / pathfs.traversal · scripts/ingest-channel.py:212
text = text.replace("[root CLAUDE.md](../CLAUDE.md)", "[root CLAUDE.md](../../CLAUDE.md)")- Why
- No further detail recorded for this rule.
- Fix
- —
LOWFilesystem / pathfs.traversal · scripts/ingest-channel.py:213
text = text.replace("../.claude/skills/karpathy-kb/SKILL.md", "../../.claude/skills/kb/SKILL.md")- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha 118e61cf1c61 · 16 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publisherpedronauck GitHub userOwner of the repository this skill is read from
- Source folderpedronauck/skills/skills/mine/kb-yt-channelThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict118e61cf1c61A new audit runs when the source changes
- Repository statusNot archivedLast push 31 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Create and maintain Karpathy KB topics from YouTube channels through scaffolding, bulk transcript ingestion, validation, and indexing. Excludes single videos, general summaries, and other sources.
--- name: kb-yt-channel description: "Create and maintain Karpathy KB topics from YouTube channels through scaffolding, bulk transcript ingestion, validation, and indexing. Excludes single videos, general summaries, and other sources." disable-model-invocation: true --- # KB YouTube Channel Use the native `kb ingest channel` for channel resolution, transcripts, dedup/resume, retries, and pacing. The bundled `scripts/ingest-channel.py` adds topic organization under `yt-channels/`, metadata, indexes, validation, and a run report. 1. Resolve the vault, channel/playlist URL, topic slug/title/domain, video selection (`--limit N` or `--all`), and transcript policy (`captions`, `auto`, or `stt`) from the request. Ask only for choices that cannot reasonably be inferred. 2. Check required tools once, reusing current evidence: `kb`, `yt-dlp`, `qmd` when indexing, and `ffmpeg` plus the configured provider when STT is requested. Do not install optional networking dependencies as a default preflight. 3. Run `python3 <kb-yt-channel-dir>/scripts/ingest-channel.py` with `--vault`, `--channel-url`, `--topic-slug`, `--title`, `--domain`, selection, and `--transcribe`. Resolve the helper from this skill directory. Native-language captions are the default; override `--sub-langs` only when needed. `--no-index` defers indexing; `--embed` requests embeddings. 4. A preview is optional. The existing `--dry-run` **creates/updates the topic skeleton and metadata**, then lists the ingest plan without transcripts; it is not a read-only preview. Use it only within authorized topic creation/update. Do not require preview followed by a repeated full preflight. 5. Inspect the helper's JSON summary and failures. Reuse its completed topic-info/lint/index validation; run additional checks only for missing evidence. When searchability is part of the task, verify one representative `kb search` in the topic/collection after indexing. 6. Report actual ingested/skipped/failed counts and the report path. Compile wiki articles only if the task includes synthesis; transcript ingestion alone does not imply compilation. ## Failures and references Start with the existing network configuration and native bounded retries/backoff. On rate limits, honor server guidance, lower concurrency, or increase pacing. Configure authenticated cookies or a permitted proxy only when an observed access/network problem requires it; never expose credentials or mandate a residential proxy for large channels. Read `references/channel-topic-contract.md` for metadata/output details and `references/troubleshooting.md` for an actual failure. Resume the same request after repair; native dedup preserves successful ingests. Missing captions can justify `auto`/STT if that scope and provider cost are authorized. Preserve partial outputs; use the supported refresh path for a specific transcript rather than deleting user data by default.
Excerpt, first 2,916 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 118e61c
git clone https://github.com/pedronauck/skills git -C skills checkout 118e61cf1c61
The author documents no install command, so this uses the repository directly. Our verdict covers commit 118e61cf1c61 only.
Works in
The author has not said which agents this skill supports, and we have not tested it in any.
Audit history
Every audit, every source change
- ✓SAFE B 89 / 100
first audit · source
118e61cf1c61
Similar skills
obra/superpowers
Use when creating new skills, editing existing skills, or verifying skills work before deployment
mattpocock/skills
A relentless interview to sharpen a plan or design, which also creates docs (ADR's and glossary) as we go.
mattpocock/skills
Grill the user relentlessly about a plan, decision, or idea. Use when the user wants to stress-test their thinking, or uses any 'grill' trigger phrases.
Questions about Kb Yt Channel
What does the Kb Yt Channel skill do?
Is Kb Yt Channel safe to install?
What can Kb Yt Channel access on my machine?
How current is this page?
Sources
- github.com/pedronauck/skills/tree/main/skills/mine/kb-yt-channel — the audited source at commit 118e61cf1c61 and every finding aboveObserved · 16 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the Kb Yt Channel skill do?
- Is Kb Yt Channel safe to install?
- What can Kb Yt Channel access on my machine?