Back to skill
Skillv1.0.0
VirusTotal security
YouTube Transcript Extractor · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 3:36 AM
- Hash
- 13b7a8e30b1f59dac6c50d11601653861ba6277a27561c9fb31de49fc593be0e
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: yt-transcript Version: 1.0.0 The skill bundle is designed to extract YouTube video transcripts, which aligns with its stated purpose. All scripts (`yt-transcript.sh`, `transcript.js`, `transcript.mjs`) and their dependencies are focused on this functionality, making network calls only to YouTube-related domains. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, or prompt injection attempts in the `SKILL.md` that would instruct an agent to perform harmful actions or access unrelated sensitive data. The mention of `SUPADATA_API_KEY` in `SKILL.md` is informational about the skill's internal workings, not an instruction for the agent to retrieve or exfiltrate it.
- External report
- View on VirusTotal