Youtube Video Download

• Risk level: Low
• Analyzed: Apr 16, 2026, 7:24 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's requirements and runtime instructions are broadly consistent with a cloud-based YouTube-to-MP4 service, but there are a few small inconsistencies and privacy implications you should review before installing.

What to consider before installing: 1) The skill sends video URLs and (optionally) uploaded media to mega-api-prod.nemovideo.ai — verify you trust that service and review its privacy/terms and copyright implications. 2) The skill will use any NEMO_TOKEN you provide, or it will automatically request an anonymous token from the same API (so it will make network calls even without a user token). 3) It asks the agent to read the skill's frontmatter and detect install paths in your home directory to set attribution headers — this requires filesystem access and is not strictly necessary for downloading videos; ask the author why this is needed. 4) There is no source/homepage listed and registry metadata mismatches the SKILL.md configPaths; if you need higher assurance, request a source repo or a clear privacy statement from the maintainer before installing.