YouTube Super Chat Event
v0.10.7-devManage YouTube Super Chat events. Use this skill to list Super Chat events for a channel. Useful when working with YouTube super chat event — provides comman...
⭐ 0· 185·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill is a thin wrapper around the yutu CLI for listing YouTube Super Chat events. Required binary (yutu), config files (client_secret.json, youtube.token.json), and env vars (YUTU_CREDENTIAL, YUTU_CACHE_TOKEN) are appropriate and expected for OAuth-based access to the YouTube API.
Instruction Scope
SKILL.md only instructs the agent to run yutu commands and to perform standard OAuth setup (open browser for consent, store token). It does not ask the agent to read unrelated files, aggregate unrelated credentials, or exfiltrate data to external endpoints besides the normal YouTube/GCP flows.
Install Mechanism
Install uses a Node package (@eat-pray-ai/yutu) that provides the yutu binary — a typical and proportional install method. Note: npm packages run code when installed and the skill is instruction-only so the registry package contents were not included here; users should verify the package source/repo (GitHub link provided) before installing.
Credentials
Declared env vars and config paths are relevant to OAuth and the yutu tool. The primary credential is YUTU_CREDENTIAL (OAuth client secret). No unrelated secrets or excessive variables are requested.
Persistence & Privilege
always is false and model invocation is normal (false). The skill does not request elevated or persistent platform privileges and does not claim to modify other skills or global agent configuration.
Assessment
This skill is coherent for managing YouTube Super Chat events via the yutu CLI, but you should: 1) verify the npm package and GitHub repo (https://github.com/eat-pray-ai/yutu) before installing to ensure you trust the maintainer; 2) create Google OAuth credentials with the minimal scopes needed and keep client_secret.json and youtube.token.json on a machine you control; 3) prefer installing via a package manager you trust (npm, brew, winget) and inspect the package contents if you can, since the registry package code is not included here; 4) be aware installing an npm package can execute code on your system — review releases and checksums if available. If you need higher assurance, review the yutu source code or ask the maintainer for a signed release before installation.Like a lobster shell, security has layers — review code before you run it.
0.10.6-3vk97c4mggvx9pj4kzqp2ss1ca5s82vm000.10.7-devvk979bg7r6nckqge4jv450z4dah82w338latestvk979bg7r6nckqge4jv450z4dah82w338
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬🐰 Clawdis
Binsyutu
EnvYUTU_CREDENTIAL, YUTU_CACHE_TOKEN
Configclient_secret.json, youtube.token.json
Primary envYUTU_CREDENTIAL
Install
Node
Bins: yutu
npm i -g @eat-pray-ai/yutu