Youtube Learning
v1.0.0Summarize YouTube videos, extract key points, create notes, quizzes, and structured learning paths for efficient knowledge acquisition.
⭐ 0· 50·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description align with the runtime instructions: the SKILL.md focuses on summarizing YouTube videos, transcript analysis, note/quiz/path generation and organization. However, it lists integrations (YouTube transcript API, Notion, Obsidian, file system) without declaring required credentials or explaining which transcript API is used—this is a gap between claimed integrations and declared requirements.
Instruction Scope
SKILL.md is an instruction-only spec that stays on-topic: it describes transcript extraction, summarization, exporting notes, and organizing videos. It does not instruct reading unrelated system files or harvesting unrelated credentials. The file mentions saving to the file system and exporting to external note apps, which is within the described scope but lacks concrete rules about what is saved and where.
Install Mechanism
No install spec and no code files are present (instruction-only). That minimizes disk write and execution risk; nothing is downloaded or executed by an install step.
Credentials
The skill declares no required environment variables or primary credentials. Yet it references external integrations (Transcript API, Notion) that typically require API keys/credentials. The absence of declared credential requirements is not malicious by itself but is underspecified and could lead to runtime prompts for secrets or ad-hoc use of third-party services—ask the author how credentials and exports are handled.
Persistence & Privilege
always is false and agent invocation is normal. The skill implies saving notes/collections and 'progress tracking' but does not declare config paths or claims to modify other skills or system-wide settings. No elevated persistence or privileged system changes are requested in the manifest.
Assessment
This instruction-only skill appears coherent for summarizing YouTube content and has no installers or declared credential requests, which reduces obvious risk. Before installing or enabling it, ask the author or marketplace listing to clarify: (1) How transcripts are obtained — does it use YouTube's public captions, the YouTube Data API, or a paid third-party 'transcript API'? (2) What credentials (API keys, OAuth) will be needed for transcript fetching or exports (Notion, Obsidian, calendar)? (3) Where exported notes and progress data are stored locally or in the cloud, and whether any third-party service receives video content or transcripts (privacy/leak risk). Don't provide broad API keys or tokens without understanding scope; test the skill first with non-sensitive/public videos; and prefer explicit user prompts for exports or credential usage rather than silent background uploads.Like a lobster shell, security has layers — review code before you run it.
latestvk976wr8h85ge9fgpx012dhtnvs83ve1a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.