← Back to search

YouTube Shorts Agent

davidmosiah Scanned 22d ago

Agent-first YouTube Shorts uploader: dry-run validation, OAuth checks, synthetic-media metadata.

MCP Registry ↗
B
84.7 / 100

Versions

0.1.5latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 6

youtube_agent_manifest
annotations: verified low

Machine-readable install, client, runtime and safety guidance for agents.

client string
readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
youtube_connection_status
annotations: verified low

Check dry-run mode, OAuth readiness and live upload readiness without exposing tokens.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
youtube_privacy_audit
annotations: verified low

Return OAuth scope, synthetic media and live-upload safety boundaries.

readOnlyHint true openWorldHint false idempotentHint true destructiveHint false
youtube_oauth_authorize_url
annotations: verified low

Create a Google OAuth authorization URL and persist the PKCE verifier locally without returning it to the agent.

state string scopes array redirect_uri string
readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
youtube_upload_short
annotations: verified low

Upload one vertical video as a YouTube Short. Dry-run is enabled by default; live mode requires YOUTUBE_DRY_RUN=false.

tags array title string caption string video_path string privacy_status enum contains_synthetic_media boolean
readOnlyHint false openWorldHint true idempotentHint false destructiveHint false
youtube_list_recent_videos
annotations: verified low

List recent videos from the configured YouTube channel.

max_results number
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

info
Tool 'youtube_agent_manifest' annotations are consistent annotation_checker · 80%
info
Tool 'youtube_connection_status' annotations are consistent annotation_checker · 80%
info
Tool 'youtube_privacy_audit' annotations are consistent annotation_checker · 80%
info
Tool 'youtube_oauth_authorize_url' annotations are consistent annotation_checker · 80%
info
Tool 'youtube_upload_short' annotations are consistent annotation_checker · 80%
info
Tool 'youtube_list_recent_videos' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client secret in davidmosiah-youtube-shorts-agent-26827b4/test/youtube-official.test.js auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: youtube_agent_manifest manifest_parser · 85%
info
Tool: youtube_connection_status manifest_parser · 85%
info
Tool: youtube_privacy_audit manifest_parser · 85%
info
Tool: youtube_oauth_authorize_url manifest_parser · 85%
info
Tool: youtube_upload_short manifest_parser · 85%
info
Tool: youtube_list_recent_videos manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 104 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%