Is Youtube Mcp safe to install?

SaferSkills independently audited Youtube Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.4 KB · Markdown

YouTube MCP

A Model Context Protocol (MCP) server for YouTube video analysis, providing tools to get transcripts, summarize content, and query videos using Gemini AI.

Features

📝 Transcript Extraction: Get detailed transcripts from YouTube videos
📊 Video Summarization: Generate concise summaries using Gemini AI
❓ Natural Language Queries: Ask questions about video content
🔍 YouTube Search: Find videos matching specific queries
💬 Comment Analysis: Retrieve and analyze video comments

Requirements

Python 3.9+
Google Gemini API key
YouTube Data API key

Running Locally

Installing via Smithery

To install youtube-mcp for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @Prajwal-ak-0/youtube-mcp --client claude

Option 1: Install directly from smithery

Option 2: Local setup

Clone the repository:

   git clone https://github.com/Prajwal-ak-0/youtube-mcp
   cd youtube-mcp

Create a virtual environment and install dependencies:

   python -m venv .venv
   source .venv/bin/activate  # On Windows: .venv\Scripts\activate
   pip install -e .

Create a .env file with your API keys:

   GEMINI_API_KEY=your_gemini_api_key
   YOUTUBE_API_KEY=your_youtube_api_key

Run MCP Server

   mcp dev main.py

Navigate to Stdio

Go cursor or windsurf configure with this json content:

   {
     "youtube": {
       "command": "uv",
       "args": [
         "--directory",
         "/absolute/path/to/youtube-mcp",
         "run",
         "main.py",
         "--transport",
         "stdio",
         "--debug"
       ]
     }
   }

Available Tools

youtube/get-transcript: Get video transcript
youtube/summarize: Generate a video summary
youtube/query: Answer questions about a video
youtube/search: Search for YouTube videos
youtube/get-comments: Retrieve video comments
youtube/get-likes: Get video like count

Contributing

Contributions welcome! Please feel free to submit a Pull Request.

Youtube Mcp— agent skill

Is Youtube Mcp safe to install?

YouTube MCP

Features

Requirements

Running Locally

Installing via Smithery

Option 1: Install directly from smithery

Option 2: Local setup

Available Tools

Contributing

Audit the pieces. Scan the whole. Decide.