📦 YouTube Watcher — YouTube 视频解析
v1.0.0获取并读取 YouTube 视频的字幕。用于总结视频内容、回答视频相关问题或提取信息。
254· 4.2万·457 当前·477 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill does what it says — it uses yt-dlp to fetch YouTube subtitles and converts them to plain text; its requirements and behavior are consistent with its description.
评估建议
This skill appears coherent and limited to fetching YouTube subtitles using yt-dlp and converting them to plain text. Before installing: ensure you trust the source of yt-dlp (install via your package manager: brew or pip) since yt-dlp will make network requests to YouTube; the script prints transcript text to stdout (which your agent may send to the model), so avoid using it on videos containing sensitive/private information if you do not want that content sent to external services. Note the sm...详细分析 ▾
✓ 用途与能力
The skill's stated purpose is fetching and reading YouTube transcripts. It only requires the yt-dlp binary (and the provided script invokes yt-dlp) which is appropriate and expected.
✓ 指令范围
SKILL.md instructs running the included Python script which runs yt-dlp in a temporary directory to fetch subtitles and prints cleaned text to stdout. The script only reads the temporary subtitle files it created and does not access other files, environment variables, or external endpoints beyond what yt-dlp uses (YouTube).
ℹ 安装机制
Install spec in the registry lists a brew formula for yt-dlp (reasonable). SKILL.md metadata also references a pip install option — a minor inconsistency but not malicious. Both brew and pip are common install methods for yt-dlp; there is no download-from-random-URL or arbitrary archive extraction.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. The script runs a subprocess and uses a temporary directory only — no secret access or unrelated credentials are required.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated or persistent privileges or modify other skills. It can be invoked by the agent (default), which is expected for a user-invocable skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/1/25
Initial release of youtube-watcher. - Fetch and read transcripts from YouTube videos. - Summarize videos, answer questions, or extract specific information from transcripts. - Trigger phrases include: "watch youtube", "summarize video", "video transcript", "youtube summary", and "analyze video". - Requires installation of `yt-dlp` for transcript retrieval. - Only works with videos that have closed captions or auto-generated subtitles.
● 无害
安装命令
点击复制官方npx clawhub@latest install youtube-watcher
镜像加速npx clawhub@latest install youtube-watcher --registry https://cn.longxiaskill.com