📦 YouTube Transcript — YouTube 字幕提取
v1.0.1获取和总结 YouTube 视频字幕。当被要求总结、转录或从 YouTube 视频中提取内容时使用。通过住宅 IP 代理获取字幕以绕过 YouTube 的云 IP 封锁。
21· 2.0万·175 当前·178 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to do what it claims (fetch transcripts by routing requests over a residential IP), but it will attempt to manipulate host networking (wg, wg-quick, ip rules) and requires Python packages (youtube-transcript-api, requests). Before installing or running it: 1) Review the scripts locally — they are included and readable. 2) Expect to need WireGuard and root privileges to bring up interfaces and add routing rules; do not run on machines where you cannot grant/revoke such privileg...详细分析 ▾
ℹ 用途与能力
The name/description (fetch YouTube transcripts via a residential IP proxy) aligns with the included code and setup docs: the script binds HTTP requests to a VPN source IP and the docs explain WireGuard/residential routing. However, the skill metadata declares no required binaries/config paths while the SKILL.md and script clearly depend on system tools (wg, wg-quick, ip) and Python packages (youtube-transcript-api, requests). This mismatch is an incoherence (should declare those runtime requirements).
⚠ 指令范围
The SKILL.md and script instruct the agent/host to check and bring up a WireGuard interface, add system routing rules (ip rule add ... table 51820), and rely on a residential WireGuard server. Those are system-level network operations and can require root/sudo. The script also calls out editing /etc/wireguard on a home router. While these steps are coherent with the stated purpose (residential IP routing), they go beyond simple HTTP calls and will change host networking — an important security and operational surface that the metadata does not warn about.
✓ 安装机制
There is no packaged install spec (instruction-only with a code file). That is lower install risk than arbitrary remote downloads. The repository includes source files and a setup doc that tells the user to pip install youtube-transcript-api and requests. No suspicious download URLs or obfuscated code were found in the included files.
ℹ 凭证需求
The skill declares no required environment variables or credentials, which is consistent with the code (it does not require API keys). However, the script requires access to system networking utilities and a configured WireGuard setup (and will attempt to run wg-quick and ip commands). Those privilege/config needs are not represented in the metadata and may require elevated permissions on the host. The setup also suggests using a residential endpoint (home router) which implies trust and possible exposure of the home network; this should be considered before use.
⚠ 持久化与权限
The skill is not marked always:true and does not attempt to persist its own auth into agent state. However, it executes commands that modify system networking (bringing up wg0, adding ip rules). Running it will require the host to allow those changes (likely root) and may alter global routing. That is a significant privilege footprint for a skill and should be explicitly acknowledged before installing/executing.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/1/28
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install youtube-transcript
镜像加速npx clawhub@latest install youtube-transcript --registry https://cn.longxiaskill.com