ClawHub

youtube-channel-api-skill

v1.0.0

This skill helps users automatically extract structured channel data from YouTube search results via BrowserAct API. Agent should proactively apply this skil...

⭐ 0· 271·1 current·1 all-time
byMaggia@ccmagia2-gif
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name, description, SKILL.md, and the included script all focus on calling BrowserAct's workflow API to extract YouTube channel data. The required environment variable (BROWSERACT_API_KEY) matches the code's Authorization Bearer usage. The only mismatch is a probable typo in the declared required binary ('pyhon' instead of 'python'), and the SKILL metadata does not declare the Python 'requests' package dependency even though the script imports it.
✓
Instruction Scope
SKILL.md instructs the agent to check for the BrowserAct API key, run the provided script with keywords and optional upload_date, monitor terminal logs, and apply a simple retry policy. The instructions do not ask the agent to read unrelated files, other environment variables, or to send data to endpoints beyond api.browseract.com. Error-handling behavior described in SKILL.md matches the script.
ℹ
Install Mechanism
There is no install specification (instruction-only with an included script), which is low-risk. Note: the script requires Python and the 'requests' library, but the manifest incorrectly lists 'pyhon' and does not declare the requests dependency; this could cause runtime failures if the environment lacks requests or if an automated pre-check looks for 'python' and fails on the typo.
✓
Credentials
Only BROWSERACT_API_KEY is requested and used; the script uses it solely to authorize calls to BrowserAct endpoints. No other credentials, secrets, or unrelated environment variables are required or accessed.
✓
Persistence & Privilege
The skill does not request permanent platform presence (always is false), does not modify other skill or system configs, and does not elevate privileges. Autonomous invocation is allowed by default but not combined with other concerning factors.
Assessment
This skill appears to do what it says: it calls BrowserAct's workflow API to extract YouTube channel data and prints the results. Before installing, verify you are comfortable giving BrowserAct an API key (BROWSERACT_API_KEY) because the script will send that key to api.browseract.com as a Bearer token. Fix the manifest typo ('pyhon' -> 'python') or ensure a Python runtime is available, and make sure the Python 'requests' package is installed in the environment. Only provide the BrowserAct key (do not reuse other sensitive credentials). If you need stronger assurance, confirm the BrowserAct template ID/endpoint and review BrowserAct's privacy/usage policies; rotate the API key after testing and avoid granting broader credentials to this skill. If you see the skill requesting additional unrelated credentials or endpoints later, treat that as a red flag.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c94pccvh77mepmk1pwf19xn8261p2

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌐 Clawdis
Binspyhon
EnvBROWSERACT_API_KEY

Comments