youtube-download-review
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may download large files and run video processing commands on the user's machine.
The skill asks the agent to run local command-line tools for downloading and transcoding. This is central to the stated downloader purpose, but it is still local tool execution that users should be aware of.
用 `yt-dlp --dump-single-json` 获取... 示例命令: yt-dlp ...; 使用 ffmpeg 将字幕烧录进画面
Use it only in a chosen working directory and confirm yt-dlp/ffmpeg commands before running if you want tighter control.
The skill may fail or behave differently depending on locally installed versions of yt-dlp and ffmpeg.
The registry metadata does not declare required binaries, while the skill text says it relies on yt-dlp and ffmpeg.
Required binaries (all must exist): none
Install yt-dlp and ffmpeg from trusted sources and keep them updated; the skill publisher should declare these dependencies in metadata.
Downloads and generated files may clutter or consume space in the current directory.
The skill writes multiple output files into the current working directory using the YouTube video title as the folder and filename. This is expected for the workflow, but users should be aware of where files will be created.
默认在当前工作目录输出... <视频标题>/ <视频标题>.source.mp4 ... <视频标题>.mp4 ...
Run the skill from a dedicated download folder and review generated filenames/directories, especially when processing multiple links.