Universal Video Downloader
v1.0.2Download videos from YouTube, Instagram, TikTok, Twitter/X, and 1000+ other sites using yt-dlp. Supports quality selection and automatic cleanup. Use when a user provides a video link from any platform and wants to download it.
⭐ 8· 2.5k·12 current·12 all-time
bySubhadip Sarkar@itzsubhadip
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the requested binaries (yt-dlp, ffmpeg) and the included script implements info and download actions using yt-dlp. No unexplained environment variables, packages, or external services are requested.
Instruction Scope
SKILL.md instructs the agent to call the provided script to fetch formats and download, send the file via the message tool, and then delete it. The instructions do not attempt to read unrelated files, environment variables, or transmit data to unexpected endpoints. The required cleanup step is explicit.
Install Mechanism
There is no install spec (instruction-only with a bundled script). That lowers install risk; the skill relies on existing system binaries (yt-dlp, ffmpeg) which must be provided by the environment.
Credentials
The skill requests no credentials or config paths. The lack of env secrets is proportional to a downloader tool. The included script runs yt-dlp (which will access network resources) — this is expected and aligned with purpose.
Persistence & Privilege
always:false (no forced presence) and normal autonomous invocation settings. The skill does not request persistent system-wide changes or modify other skills' configurations.
Assessment
This skill appears to do exactly what it claims, but take these practical precautions before installing: 1) Ensure yt-dlp and ffmpeg are installed from trusted sources (distribution packages or official releases) because the skill runs those binaries. 2) Be aware yt-dlp will fetch remote content (network activity is expected). 3) Confirm you have permission to download the content (copyright and platform terms). 4) Make sure the agent has permission to write and delete files in its working directory; the SKILL.md requires immediate deletion after upload to free disk space. 5) If you do not want the agent to download files without explicit user confirmation, restrict autonomous invocation or require explicit user prompts. Overall the skill is coherent and contains no evident exfiltration or unrelated credential requests.Like a lobster shell, security has layers — review code before you run it.
latestvk973xkgt9mj7b92yrtfjdrjvs980zsr6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎥 Clawdis
Binsyt-dlp, ffmpeg