ClawHub

youtube-comments-api-skill

v1.0.1

This skill helps users extract structured video list data and comment data from YouTube using the BrowserAct API. The Agent should proactively apply this ski...

⭐ 0· 393·1 current·1 all-time
byMaggia@ccmagia2-gif
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is described as a BrowserAct-based YouTube comments extractor and it only requires Python and a BROWSERACT_API_KEY. The included script calls api.browseract.com and uses a template ID; these requirements are proportional and expected for the stated purpose.
✓
Instruction Scope
SKILL.md instructs the agent to check for BROWSERACT_API_KEY, request it from the user if missing, invoke the bundled Python script with search parameters, monitor stdout for status logs, and follow a limited retry logic. The instructions do not ask the agent to read unrelated files, access other environment variables, or transmit data to endpoints beyond BrowserAct.
✓
Install Mechanism
There is no install spec (instruction-only skill) and the only included code is a small Python script. No downloads from arbitrary URLs, package installs, or extraction steps are present.
✓
Credentials
Only one environment variable (BROWSERACT_API_KEY) is required and it directly matches the service the skill integrates with. No unrelated secrets, keys, or system config paths are requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level presence or modify other skills or agent-wide configuration. It uses normal autonomous invocation behavior but nothing overly privileged.
Assessment
This skill appears internally consistent, but it sends your search parameters to a third party (BrowserAct) and returns scraped YouTube data. Before installing or running: 1) Confirm you trust BrowserAct and its privacy/usage policy; do not share secrets beyond the required BROWSERACT_API_KEY. 2) Use an API key with minimal permissions and monitor or rotate the key if concerned. 3) Be aware the script prints scraped comment data to stdout (the agent will see it), so avoid fetching sensitive or private information. 4) If you operate in a constrained environment, review network egress rules to control data sent to api.browseract.com.

Like a lobster shell, security has layers — review code before you run it.

latestvk9771aepdb4jv2tbp4epq2fjj982sksq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🌐 Clawdis
Binspython
EnvBROWSERACT_API_KEY

Comments