📦 Youtube Downloader — 下高清MP4
v1.0.1识别用户发来的 YouTube 链接后，自动解析并下载最高画质 MP4 文件，方便离线观看与保存。
0· 604·2 当前·2 累计
by 下载技能包
最后更新
2026/2/26
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill is largely coherent: it includes a Bash script that uses yt-dlp to download videos and save them under ~/.openclaw/workspace/assets/videos and updates a local registry. Before installing: 1) Ensure you have yt-dlp installed from a trusted source (and jq if you want registry updates). The manifest did not declare these dependencies. 2) Review and confirm you're comfortable with the skill writing files to ~/.openclaw/workspace/assets and running the bundled script. 3) If you need to dow...详细分析 ▾
⚠ 用途与能力
The skill's stated purpose (download YouTube videos) matches the bundled script which calls yt-dlp to fetch and save videos. However, the registry metadata and SKILL.md declare no required binaries or credentials, while the script actually depends on external tools (yt-dlp and optionally jq). Omitting those required binaries in the manifest is an inconsistency that could lead to failed runs or surprise behavior.
ℹ 指令范围
The SKILL.md and script are narrowly scoped to take a URL and optional label, run yt-dlp, save the MP4 to ~/.openclaw/workspace/assets/videos, and update a registry. That stays within the stated purpose. One minor mismatch: SKILL.md mentions age-restricted videos may need cookies, but the script has no way to accept cookie files or credentials — so the documentation overpromises a capability that isn't implemented.
✓ 安装机制
There is no install spec (instruction-only + included script). No remote downloads or installers are invoked by the skill itself. The main install-related risk is that yt-dlp (an external dependency) must be present and may be installed by the user; the skill does not fetch arbitrary remote code.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. The script only reads the provided URL/label and writes files under the agent workspace (~/.openclaw/workspace/assets), which is consistent with its purpose.
✓ 持久化与权限
The skill is not marked always:true and is user-invocable. It writes assets/registry files only under the skill's workspace path and does not modify other skills or system-wide configuration. Autonomous invocation is allowed by default but not set to forced inclusion.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/2/24
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install yt-downloader
镜像加速npx clawhub@latest install yt-downloader --registry https://cn.longxiaskill.com