Back to skill
Skillv1.0.0

VirusTotal security

Youtube Downloader Skimmer · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 4, 2026, 7:36 AM
Hash
83e1c10aabce7299f51cf220c99017f6cec9abec1b1c08e8342712ac6dafcda4
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: youtube-downloader-skimmer Version: 1.0.0 The skill is a utility for downloading and clipping YouTube videos using yt-dlp and ffmpeg. While the Python script (youtube_downloader.py) contains several functional bugs that would cause it to crash—specifically using variables like 'format_str' and 'title' before they are defined—these appear to be unintentional coding errors rather than malicious flaws. The documentation mentions sending files to platforms like QQ or Telegram, but the implementation is merely a print statement stub with no actual exfiltration logic. The use of subprocess.run with argument lists prevents shell injection, and the behavior is entirely consistent with the stated purpose.
External report
View on VirusTotal