Tóm tắt Video YouTube (Jaskies)
v1.1.0Tóm tắt nội dung video YouTube từ đường link cung cấp. Hỗ trợ trích xuất transcript tự động và phân tích ý chính chuyên sâu. Yêu cầu máy chủ có cài đặt yt-dl...
⭐ 0· 206·0 current·0 all-time
byTrần Anh Vũ@jaskies
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The declared purpose (YouTube transcript + summary) matches the included script that runs yt-dlp. Minor mismatch: the registry metadata lists no required binaries, while SKILL.md correctly tells the user to have yt-dlp and ffmpeg installed. This looks like an omission in metadata rather than malicious behavior.
Instruction Scope
SKILL.md directs the agent to run the included script to extract subtitles and then to remove timestamps and summarize. The script itself simply outputs the VTT subtitle file (it does not strip timestamps), so the agent is expected to perform timestamp-stripping and summarization — this is a scope mismatch but not a red flag. Also the usage example path ('bash skills/public/tomtat-video/...') differs slightly from the included file path ('scripts/get_transcript.sh'), which may cause runtime confusion. The yt-dlp invocation suppresses stdout/stderr (redirected to /dev/null 2>&1), which will hide diagnostic messages.
Install Mechanism
There is no install spec; this is an instruction-only skill with a tiny shell script. That is low-risk: nothing is downloaded or written by the skill itself. SKILL.md suggests installing yt-dlp and ffmpeg via standard package managers/pip, which is appropriate for the stated functionality.
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate to its simple purpose (fetch subtitles and summarize).
Persistence & Privilege
The skill does not request persistent or elevated privileges; always:false and no install-time modifications are present.
Assessment
This appears to be a straightforward YouTube summarizer. Before installing/use: (1) ensure yt-dlp and ffmpeg are installed (SKILL.md explains how); (2) note the script returns raw VTT (with timestamps) — the agent or your pipeline must remove timestamps before summarizing; (3) the example run path in SKILL.md may not match where the script is stored—adjust the command to the actual script path; (4) yt-dlp will contact YouTube to download subtitles, so network access is required and you should avoid using sensitive/private videos; (5) the script suppresses yt-dlp output (errors may be hidden) — run manually first to confirm it works in your environment. If any of these points are unacceptable, inspect or modify scripts locally before running.Like a lobster shell, security has layers — review code before you run it.
latestvk970w4zhhfpk0bgcqvmketpxqh82redz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.