yt-dlp
v1.0.0AI skill to analyze song requests, verify local workspace files, and download missing tracks directly from YouTube bypassing API limits.
⭐ 0· 99·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares yt-dlp and ffmpeg (both required to download and convert audio) and its instructions show exactly how those binaries are used. There are no unrelated binaries, env vars, or config paths requested.
Instruction Scope
SKILL.md confines activity to the user's workspace (~/.openclaw/workspace/music/), describes checking for existing files and downloading only missing tracks, and does not instruct reading unrelated files or exfiltrating data. It does run shell commands (find, mkdir, cd, yt-dlp), which is expected for this purpose.
Install Mechanism
The registry lists this as an instruction-only skill (no install spec), but the SKILL.md metadata includes suggested install entries (apt ffmpeg, pip yt-dlp). This is an internal inconsistency: the skill itself suggests how to install dependencies, but the package does not include an authoritative install step in the registry.
Credentials
No credentials or sensitive environment variables are requested. The only filesystem access is the user-scoped workspace directory, which is appropriate for the stated function.
Persistence & Privilege
The skill does not request always:true or other elevated persistence. It is user-invocable and allows autonomous invocation (the platform default), which is expected for a functional skill.
Assessment
This skill appears coherent for its purpose, but review these practical points before installing: 1) The skill executes shell commands that will download files from the Internet into ~/.openclaw/workspace/music/ — ensure you are comfortable with that location and its permissions. 2) There is a small metadata inconsistency: the SKILL.md suggests apt/pip install steps but the registry provides no install spec; the agent likely won't auto-install yt-dlp/ffmpeg for you. 3) Install yt-dlp and ffmpeg from trusted sources (official repos or releases) before use. 4) Be aware of legal and terms-of-service issues when downloading copyrighted content. 5) If you do not fully trust the skill owner, consider running the commands manually first or using a sandboxed environment; review any future updates for changes to the instructions. Overall, nothing in the skill asks for unrelated credentials or system-wide access, but exercise normal caution with tools that run shell commands and fetch external content.Like a lobster shell, security has layers — review code before you run it.
latestvk9785dd9bre1gqvzhy4w8pzwz183nvce
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📥 Clawdis
Binsyt-dlp, ffmpeg