ClawHub

YouTube I18n Language

v0.10.7-dev

Manage YouTube i18n languages. Use this skill to list available internationalization languages. Useful when working with YouTube i18n language — provides com...

⭐ 1· 187·0 current·0 all-time
by@openwaygate
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a thin wrapper around the yutu CLI to list YouTube i18n languages. Required binary (yutu), OAuth credential and cached token, and the client_secret.json / youtube.token.json files are all consistent with calling the YouTube Data API.
✓
Instruction Scope
SKILL.md only instructs the agent to use the yutu CLI and points to setup/install steps. It does not request unrelated files, arbitrary system data, or external endpoints beyond the documented YouTube/GCP flows.
ℹ
Install Mechanism
Install spec points to an npm package (@eat-pray-ai/yutu) and setup suggests brew/winget/go or GitHub releases. This is proportionate for a CLI but installing a third‑party package carries the usual supply‑chain risk — verify the package and release binaries before installing.
✓
Credentials
Declared env vars (YUTU_CREDENTIAL, YUTU_CACHE_TOKEN) map directly to Google OAuth client secret and token as described in the setup guide. The number and type of secrets requested are appropriate for YouTube API access.
✓
Persistence & Privilege
The skill is not marked always:true and does not request system‑wide changes. Autonomous invocation is allowed (default) but the skill does not request elevated or permanent platform privileges.
Assessment
This skill is coherent: it simply wraps the yutu CLI and needs your Google OAuth client credentials and token to call the YouTube API. Before installing, verify the upstream package/release (GitHub repo and npm package) are legitimate, install from the official release location, and keep your OAuth client secret and token stored only where needed (use least-privilege credentials and avoid putting long‑lived secrets in shared/global env vars). If you want extra caution, review the yutu project's source and release artifacts before running npm install or placing the binary on your PATH.

Like a lobster shell, security has layers — review code before you run it.

0.10.6-3vk97439a69sm8jh34r35m1veksx82smd90.10.7-devvk97091321jm17fbe0jfgj0tej582xm2ylatestvk97091321jm17fbe0jfgj0tej582xm2y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬🐰 Clawdis
Binsyutu
EnvYUTU_CREDENTIAL, YUTU_CACHE_TOKEN
Configclient_secret.json, youtube.token.json
Primary envYUTU_CREDENTIAL

Install

Node
Bins: yutu
npm i -g @eat-pray-ai/yutu

Comments