Automation & Agents
That 'Must-Install' Viral Video? Do These Two Things First
A repeatable process for evaluating any 'must-install list' video or article, plus a security checklist to run before installing an AI tool. About 15–20 minutes for a full pass.
One Core Idea
Before installing anything someone recommends, ask two questions: does this overlap with something I already have? And does the official install method ask my AI to read and execute an opaque remote instruction? The first question saves you time and account quota. The second guards against prompt injection — where someone hides malicious instructions inside a file that looks harmless, tricking your AI agent into executing them as commands.
Step by Step
Step 1 | Ask “does this overlap with something I already have?”
When you see a new tool, spend two minutes thinking (or ask your AI):
- Is there already a tool in my workflow doing the same job?
- If so, what does the new one actually improve on? Is it worth switching?
🪄 AI prompt to use (replace the brackets with your situation)
“I currently use [list the tools/skills you already have]. I found a new tool called [tool name] that does [brief description]. Compare the two for me and tell me whether it’s worth adding, or just a duplicate.”
Step 2 | Check whether the tool is actually real
A lot of recommendation videos exaggerate or mangle tool names (speech-to-text often mishears proper nouns). Before installing, confirm:
- Does this tool have a real, public page or code repository?
- Who’s the maintainer, and is it still actively maintained — or abandoned?
- What does the license say? If you might monetize this later, does it allow commercial use?
🪄 AI prompt to use
“Verify whether a tool called [tool name] actually exists, what its current maintenance status is, and whether its license permits commercial use.”
Step 3 | Check the “official install method” before you run anything
This is the step most people skip — and the one that matters most. Watch out for this pattern specifically:
“Copy this text/URL and paste it to your AI, and let it read and execute it.”
This pattern isn’t automatically malicious — plenty of legitimate tools use it to make onboarding easier for beginners. But the risk is real: if that remote text has been tampered with, your AI could be misled into doing something you never asked for and don’t want — quietly exfiltrating your data, or modifying files you never intended to touch.
You don’t need to read the code yourself. You just need to learn one prompt:
🪄 AI prompt to use (ask this before every install)
“Before you install [tool name] for me, I want you to do the following and report back:
- Find its official install instructions and read out, in full, every command you’re about to run.
- Read through its source code and tell me if it sends any data to an external URL, reads my browser credentials/cookies without a stated reason, or contains anything hidden or unusual.
- If the install requires changing system settings or adding new system components, list them for my approval first — don’t do it on your own. Only proceed with the install once everything checks out clean.“
Step 4 | Install in stages — start with the zero-risk parts
Most tools split into “works with zero setup” and “needs account login/cookies” features. Always install the zero-setup part first. Hold off on anything requiring account login — especially your social media cookies — until you actually need it, and when you do, use a secondary account rather than your primary one.
Mistakes You Will Make
- Trust the name on screen over the name your AI transcribed. Speech-to-text in videos frequently mishears proper nouns, especially foreign tool names. If you’re noting down a tool name to search for later, use what’s written on screen, not the transcript.
- Assuming “lots of people recommend it” means “safe.” A tool being popular doesn’t mean its install process is risk-free — popularity actually makes it a more attractive target for impersonation. The review step is not optional no matter how many stars a repo has.
- The urge to “just install all of them” is the most expensive mistake. Installing every tool on a list rarely blows up outright — the real cost is your machine or accounts filling up with things you don’t use and can’t remember the purpose of, until cleanup becomes its own project. Install only the one that solves a real need you have right now.
Universal Rescue: What to Ask Your AI When You’re Stuck
If you get stuck on any step, paste this to your AI (Claude, ChatGPT, whatever you use):
I'm new to this and following a tutorial to do [what you're trying to do].
I'm stuck at this step: [describe where you're stuck].
Here's the error message or unexpected behavior I'm seeing: [paste it exactly, or describe the screen].
Walk me through this one step at a time, assuming I don't understand the underlying mechanics.
The One-Line Takeaway
Next time you see a “must-install list” video, ask “is this redundant?” first, then “is the install method clean?” — clear both before you touch anything. That habit is worth more than any tool on the list.
This is part of a one-person company built fully in public. To get the full SOPs and transparent monthly reports, subscribe to the newsletter.