YouTube Transcript (yt-dlp)
v1.1.0Extract YouTube video transcripts from existing captions (manual or auto-generated) using yt-dlp, with optional timestamps and local SQLite caching. Use when...
⭐ 0· 99·0 current·0 all-time
by@mpbshhx
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match what the included script and instructions do: use yt-dlp + python to download existing captions, parse VTT, and cache results in SQLite. Declared required binaries (python3, yt-dlp) are appropriate and necessary.
Instruction Scope
SKILL.md instructs the agent/user to run the bundled Python script, use a local SQLite cache under the skill baseDir, and optionally provide a Netscape-format cookies.txt. It also references an environment variable (YT_TRANSCRIPT_COOKIES) and a config path (~/.config/yt-transcript/) for cookies; these are operationally reasonable but the env/config usage is not declared in the registry metadata.
Install Mechanism
No install spec (instruction-only with a bundled script). This is low-risk; nothing in the manifest downloads arbitrary external code. The script runs yt-dlp as a subprocess, which is expected for this task.
Credentials
The skill does not require credentials in the registry metadata. However SKILL.md (and likely the script) optionally reads a cookies file and refers to YT_TRANSCRIPT_COOKIES. Cookies can contain sensitive session data and grant access to age-restricted or member-only content — treat them as secrets. The registry should have declared this optional env/config usage for transparency.
Persistence & Privilege
Skill is not always-enabled and is user-invocable. It writes a cache database under the skill baseDir (or user-specified path) which is appropriate for its functionality and not excessive privilege.
Assessment
This skill appears to do what it claims: it runs a bundled Python script that calls yt-dlp to fetch captions, parses VTT, and caches results locally. Before installing: (1) ensure you trust the yt-dlp binary on your system, (2) be aware the script writes a SQLite cache under the skill directory (or a custom path you provide), (3) if you need age-restricted content you must supply YouTube cookies — treat those cookie files (or YT_TRANSCRIPT_COOKIES env var) as sensitive and store them securely, and note that the registry metadata did not declare this optional env/config usage, (4) inspect the bundled script if you want to confirm it meets your privacy/security expectations. Overall coherent and proportionate for its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk97fb5cjjhfhyhpzmgdvvapzzh835fp8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis
OSLinux · macOS · Windows
Binspython3, yt-dlp