📦 Video Dl — 视频下载
v1.1.0一键解析并下载 YouTube、Reddit、Twitter/X、TikTok、Instagram 等 1000+ 站点视频，支持多格式与清晰度选择。
0· 1.4k·2 当前·2 累计
by @dimitryvin下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill largely does what it says (downloads videos using yt-dlp), but check a few things before installing or running it:
- Ensure you have the required binaries installed from trusted sources: yt-dlp, ffmpeg and ffprobe. The skill does not declare these requirements but both scripts call them.
- Note that the SKILL.md suggests a Telegram send flow, but compress-and-send.sh only compresses and prints success; it does not actually upload or notify Telegram. Treat the CHAT_ID parameter as inf...详细分析 ▾
⚠ 用途与能力
The skill's stated purpose (download videos via yt-dlp) matches the provided scripts. However, the SKILL.md and scripts rely on external binaries (yt-dlp, ffmpeg, ffprobe) but the skill declares no required binaries. Also SKILL.md describes a 'Sending to Telegram' workflow which implies sending to an external service, but the included compress-and-send.sh only compresses and prints status — it does not transmit to Telegram. The absence of declared binary requirements and the mismatch about Telegram are incoherent with the metadata.
ℹ 指令范围
SKILL.md instructs the agent/user to run the included scripts with a URL (and for compression, a CHAT_ID). The scripts operate only on the provided URL/file and write to ~/Downloads/videos (or a user-specified output). They do not read unrelated system files or additional environment variables. The scope is largely limited to downloading and compressing media, but SKILL.md's wording could mislead users into thinking the skill autonomously sends media to Telegram when it does not.
✓ 安装机制
There is no install spec (instruction-only skill with two helper scripts). That minimizes install-time risk (nothing downloaded or written by an installer).
ℹ 凭证需求
The skill requests no environment variables or credentials (good). The scripts do access $HOME and look for $HOME/.local/bin/yt-dlp, and write to ~/Downloads/videos by default; these are reasonable for the stated task but should have been declared as required binaries/dependencies (yt-dlp, ffmpeg, ffprobe). No secrets are requested or used.
✓ 持久化与权限
always is false and the skill is user-invocable only. It does not request permanent presence or attempt to modify other skills or system-wide agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/2/11
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install video-dl
镜像加速npx clawhub@latest install video-dl --registry https://cn.longxiaskill.com✓ 镜像可用