summerizeryoutube
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears purpose-aligned for YouTube transcript summaries, but users should verify the undeclared localhost backend and its transcript storage behavior before use.
Before installing, make sure you intentionally run and trust the localhost:8000 backend, and check how it stores, retains, and deletes transcript embeddings. No artifact-backed evidence of credential theft, destructive behavior, or unrelated data access was found.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill will only be as trustworthy as the local service listening on these endpoints.
The skill depends on a local backend service, but the provided artifacts include no backend code or install specification for that service.
"url": "http://localhost:8000/process-video" ... "url": "http://localhost:8000/retrieve-chunks"
Use it only with a backend you installed intentionally and trust; verify what that backend does with video URLs, transcripts, and embeddings.
Video transcript content may be retained and reused by the backend for later Q&A.
The skill describes persistent transcript-derived storage for retrieval-based answering.
- Generate embeddings - Store in vector database
Confirm the backend’s storage location, retention policy, and whether stored transcript data can be cleared.
If an unexpected local service is running on that port, it could receive the YouTube URLs or Q&A requests intended for the summarizer backend.
Tool communication is over a localhost HTTP endpoint with no authentication or service identity described in the artifacts.
"method": "POST", "url": "http://localhost:8000/process-video", "headers": { "Content-Type": "application/json" }Ensure the intended backend is the service bound to localhost:8000 before using the skill.