YouTube

v1.0.3

YouTube Data API integration with managed OAuth. Search videos, manage playlists, access channel data, and interact with comments. Use this skill when users want to interact with YouTube. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

131· 24.3k·95 current·101 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name and description describe a YouTube Data API integration and the skill only requires MATON_API_KEY and network access to Maton endpoints (gateway.maton.ai, ctrl.maton.ai). Those requirements are proportionate to a managed-OAuth proxy for YouTube.
Instruction Scope
SKILL.md instructs the agent to call Maton gateway and control endpoints and to open Maton-provided OAuth URLs. It does not instruct reading unrelated files or environment variables. All network calls are to the Maton service (which then proxies to Google) — this is coherent with the stated purpose, but it does centralize OAuth and data through Maton.
Install Mechanism
No install spec or code files (instruction-only). This minimizes on-disk risk; nothing is downloaded or written by an installer.
Credentials
Only a single environment variable (MATON_API_KEY) is required. That is consistent: Maton handles OAuth and the API key is the expected bearer credential for Maton's gateway. Note: MATON_API_KEY is sensitive (it grants access to your Maton account and proxied YouTube OAuth connections).
Persistence & Privilege
always is false and the skill requests no special persistent agent privileges or filesystem/config modifications. Model-invocation is allowed (default), which is normal for an invocable skill.
Assessment
This skill appears internally consistent for using a Maton-managed YouTube proxy, but before installing: (1) Treat MATON_API_KEY as a high-value secret — it likely gives Maton access to your YouTube account via stored OAuth connections. (2) Verify you trust Maton (maton.ai) and the skill publisher — the registry entry has no homepage and source is listed as unknown. (3) Review Maton's privacy/security policy and how it stores OAuth tokens; limit Google OAuth scopes when connecting. (4) If you prefer not to route credentials through a third party, use Google’s official APIs directly. (5) Because the skill makes network calls, only install it in environments where outbound requests to gateway.maton.ai/ctrl.maton.ai are acceptable.

Like a lobster shell, security has layers — review code before you run it.

latestvk975ccf2wpqrwr5sb248sxtx2n80xfy1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments