ClawHub

YouTube Channel Section

v0.10.7-dev

Manage YouTube channel sections. Use this skill to list or delete channel sections. Useful when working with YouTube channel section — provides commands to d...

⭐ 0· 190·0 current·0 all-time
by@openwaygate
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description, required binary (yutu), declared config files (client_secret.json, youtube.token.json), and env vars (YUTU_CREDENTIAL, YUTU_CACHE_TOKEN) all align with managing YouTube channel sections via a CLI that uses Google OAuth.
✓
Instruction Scope
SKILL.md only instructs the agent to run yutu channelSection list/delete and includes a setup guide for obtaining OAuth credentials and tokens. It does not request unrelated files, system credentials, or external endpoints beyond GitHub references and the YouTube OAuth flow.
ℹ
Install Mechanism
Install uses a published Node package (@eat-pray-ai/yutu) that provides the yutu binary. This is a common, expected mechanism for a CLI wrapper but carries the usual npm-package trust considerations (verify package/repo provenance before installing).
✓
Credentials
Required env vars and config paths are narrowly scoped to OAuth client credentials and the cached token used to call the YouTube API. No unrelated secrets or multiple unrelated credentials are requested.
✓
Persistence & Privilege
The skill does not set always:true and does not request system-wide persistent privileges. Autonomous invocation is allowed (default) which is normal for skills and appropriate here.
Assessment
This skill delegates work to the yutu CLI and asks only for OAuth client credentials and the cached token it needs to call the YouTube API — that's expected. Before installing: (1) verify the @eat-pray-ai/yutu package and its GitHub repo/release authenticity; (2) ensure you create OAuth credentials with minimal scopes and keep client_secret.json and youtube.token.json secure; (3) prefer installing from a trusted source (official releases) and review what the yutu binary will do, since installing an npm binary gives that code permission to run on your machine; (4) do not provide unrelated credentials. If you need higher assurance, inspect the yutu project source and its releases before installing.

Like a lobster shell, security has layers — review code before you run it.

0.10.6-3vk976vjjmkfx9kmbtnbkkej16d582r1yg0.10.7-devvk974tfw87shgh02k8qbr8cn22982wz57latestvk974tfw87shgh02k8qbr8cn22982wz57

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬🐰 Clawdis
Binsyutu
EnvYUTU_CREDENTIAL, YUTU_CACHE_TOKEN
Configclient_secret.json, youtube.token.json
Primary envYUTU_CREDENTIAL

Install

Node
Bins: yutu
npm i -g @eat-pray-ai/yutu

Comments