YouTube API
PassAudited by VirusTotal on May 9, 2026.
Overview
Type: OpenClaw Skill Name: agntdata-youtube Version: 1.0.15 The agntdata-youtube skill is a standard API wrapper for the agntdata.dev service, providing tools to interact with YouTube data such as video metadata, channel details, and comments. It requires a user-provided API key (AGNTDATA_API_KEY) and uses curl to make requests to api.agntdata.dev. The skill's behavior is consistent with its stated purpose, and no evidence of malicious intent, data exfiltration, or prompt injection was found in SKILL.md or _meta.json.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill can make authenticated AGNTDATA YouTube API requests, which may expose usage metadata and consume paid credits.
The skill requires a third-party API key to authenticate requests. This is expected for the stated API-integration purpose, but it is still sensitive account authority.
The API key should be available as the `AGNTDATA_API_KEY` environment variable. Every request must include it as a Bearer token
Only set AGNTDATA_API_KEY if you trust the AGNTDATA service, use a rotatable key where possible, and monitor API usage or billing.
Search terms or other request parameters provided to the skill may be visible to AGNTDATA.
The skill sends API requests to an external AGNTDATA service. This is disclosed and purpose-aligned, but user queries, video IDs, channel IDs, and use-case details may be transmitted to that provider.
Base URL ``` https://api.agntdata.dev/v1/data/youtube ```
Avoid sending sensitive or private query content unless you are comfortable with AGNTDATA receiving it, and review the provider's privacy and retention terms.
Installing the optional plugin could add executable code and permissions beyond this instruction-only skill.
The skill recommends installing a separate plugin package that is not included in the provided file manifest, so its code and permissions were not evaluated in these artifacts.
For the best experience, install the OpenClaw plugin for YouTube API instead of this skill. ```bash openclaw plugins install @agntdata/openclaw-youtube ```
If you choose the plugin path, review the plugin package source, publisher, version, and requested permissions before installing.