Yt Dlp Downloader
WarnAudited by ClawScan on May 10, 2026.
Overview
The skill is a coherent yt-dlp downloader, but it tells the agent to automatically use your browser cookies for YouTube downloads, which is high-impact session access without clear per-use consent.
Install only if you are comfortable with yt-dlp running local shell commands. Before using it, decide whether you want the agent to access your browser cookies; if not, remove or override the `--cookies-from-browser` behavior and approve cookie use only when necessary.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The download may run using your logged-in browser session, which can expose account-authenticated access to yt-dlp and affect privacy or account boundaries.
This directs the agent to read and use the user's local browser cookie/session store for YouTube downloads by default, without an explicit per-use approval step or a scoped credential declaration.
YouTube/YouTube Music → **Always use `--cookies-from-browser chrome`**
Require explicit user approval before using `--cookies-from-browser`, declare browser-cookie/session access in the skill metadata, and prefer trying unauthenticated downloads first unless the user specifically approves cookie use.
The agent may run local commands that download files and write them to disk.
The skill needs shell and network access to run yt-dlp, but the requested shell permission is broad and commands are constructed around user-provided URLs.
Execute the download using Shell tool with `required_permissions: ["all", "network"]`
Review the exact command before execution, keep output paths scoped to a safe downloads folder, and avoid running commands for untrusted or malformed URLs.
Installing or updating packages changes your local environment and depends on the package manager sources you use.
The skill documents installing external dependencies through package managers, but versions are not pinned and there is no install spec.
pip install yt-dlp brew install ffmpeg # macOS
Install dependencies manually from trusted sources, consider pinning versions, and avoid automatic package installation without review.