by 安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears coherent for downloading videos: it calls yt-dlp and optionally runs a headless browser via DrissionPage to find and fetch video URLs, and it saves files locally. Before installing or running it: 1) review the full script (the provided file listing was truncated) to ensure no hidden network endpoints or unexpected behavior; 2) install yt-dlp and DrissionPage from trusted sources (pip official packages) and be aware DrissionPage will auto-download a Chromium binary at first run...详细分析 ▾
✓ 用途与能力
Name/description claim a universal video downloader and the included script implements platform detection, yt-dlp calls, and DrissionPage browser automation which are appropriate and expected for that purpose. No unrelated credentials, binaries, or config paths are requested.
✓ 指令范围
SKILL.md instructs installing yt-dlp and DrissionPage and how to run the script; instructions focus on downloading videos, searching Douyin, and handling browser mode. It does suggest using VPN/cookies for access which is relevant to circumventing site blocks but does not tell the agent to read unrelated files or exfiltrate data. Note: the README warns DrissionPage will auto-download Chrome on first use (runtime behavior).
ℹ 安装机制
There is no install spec in the registry (instruction-only), which lowers installer risk. The runtime requires pip packages (yt-dlp, DrissionPage) per SKILL.md. DrissionPage will auto-download a Chromium binary at first run — this is expected for browser automation but means a large binary is pulled from the network during runtime. Verify you trust the DrissionPage/Chromium sources and your pip environment.
✓ 凭证需求
The skill does not request environment variables, secrets, or unrelated credentials. It uses local file I/O to save downloads and metadata; DrissionPage may use browser cookies for authenticated access (mentioned in docs) but the skill does not ask for user credentials itself.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills or system settings. It only writes its own output files (videos and JSON metadata) under user-specified output dirs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/13
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install video-downloader-tool
镜像加速npx clawhub@latest install video-downloader-tool --registry https://cn.longxiaskill.com