ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

YouTube Clipper

v1.0.3

Downloads given video from YouTube, clips from given start and end time, saves to folder on your Desktop

⭐ 1· 488·7 current·7 all-time
by@bestisblessed
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the required binaries and included script. The script only performs downloading with yt-dlp, clipping with ffmpeg, and writes output to ~/Desktop/Clips; those requirements are expected for a YouTube clipping tool.
ℹ
Instruction Scope
SKILL.md and clip.sh limit actions to downloading the specified video, clipping the provided time range, creating ~/Desktop/Clips and /tmp/youtube-clipper, and removing the temporary source file. Note: downloading involves network access to YouTube (yt-dlp) and may consume significant bandwidth/disk space; yt-dlp itself may read its own user config/cookies if present, which is outside the script but relevant to runtime behavior.
✓
Install Mechanism
Install spec uses standard package managers (brew/apt) to install ffmpeg and yt-dlp. This is a low-risk, expected mechanism for these binaries.
✓
Credentials
No credentials or extra environment variables requested. The skill's needs (network access, disk write to ~/Desktop/Clips, and /tmp usage) are proportional to its purpose. Reminder: yt-dlp may use existing user credentials/cookies or config files if present, though the skill itself doesn't request them.
✓
Persistence & Privilege
always is false, the skill does not request persistent presence or modify other skills or global agent settings. It only writes to its own temp and output directories.
Assessment
This skill appears to do exactly what it claims: it will install (or require) yt-dlp and ffmpeg, download the full video to /tmp, clip the requested time range, save the clip to ~/Desktop/Clips, then delete the temporary full download. Before installing/running: ensure you trust the source of yt-dlp/ffmpeg from your package manager, have sufficient disk and bandwidth, and understand legal/YouTube TOS implications of downloading content. If you are concerned, inspect clip.sh yourself (it is short and readable) and verify the package manager commands that will be run. Also be aware that yt-dlp may read any existing user config or cookies in your home directory at runtime even though the script does not explicitly access them.

Like a lobster shell, security has layers — review code before you run it.

latestvk971e6aek0eyvp2y4bxqvv5vdx824r50

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

✂️ Clawdis
Binsyt-dlp, ffmpeg

Install

Install ffmpeg (brew)
Bins: ffmpeg
brew install ffmpeg
Install yt-dlp (brew)
Bins: yt-dlp
brew install yt-dlp

Comments