YouTube Publisher
v1.0.0YouTube 视频自动上传工具。支持视频上传、设置标题/描述/标签/缩略图、管理频道和播放列表。基于 YouTube Data API v3 + OAuth 2.0。
⭐ 8· 1.8k·7 current·7 all-time
byleogao@pdpaer
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description describe YouTube upload/management. The included script implements YouTube Data API v3 operations and OAuth 2.0, and the skill only asks the user to provide a Google OAuth client JSON — there are no unrelated environment variables, binaries, or services requested.
Instruction Scope
SKILL.md instructs the user to obtain a Google OAuth client_secret.json and to run the included Python script. Runtime actions are limited to opening a browser for OAuth, starting a local redirect server (port 8090), saving token.json to the skill directory, and calling Google APIs. The script reads video/thumbnail files supplied by the user and writes token.json in ~/.openclaw/workspace/skills/youtube-publisher — no instructions reference unrelated system files or external endpoints beyond Google.
Install Mechanism
No install spec; the skill is instruction-only with a Python script that relies on standard google-auth and google-api-python-client libraries. Dependencies are documented and installed via pip by the user. There are no downloads from arbitrary URLs or archive extraction steps in the manifest.
Credentials
The skill requests no environment variables or secrets in the registry metadata. It uses OAuth client credentials (user-provided client_secret.json) and saves an OAuth token locally — these are the expected credentials for interacting with the YouTube API. No unrelated credentials or high-privilege config paths are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges. It stores token.json in its own skill workspace directory and does not modify other skills or global agent configuration.
Assessment
This skill appears to be what it says: a YouTube uploader that uses Google OAuth. Before using it, manually obtain OAuth credentials from the Google Cloud Console and save client_secret.json to the indicated path. Understand that the script will run a local webserver (default port 8090) and open your browser to complete OAuth, and that an access/refresh token (token.json) will be written to ~/.openclaw/workspace/skills/youtube-publisher — protect that file as it grants access to your YouTube account. Install the listed Python dependencies in a controlled environment (virtualenv) and review the included script if you have concerns. If you share the machine with others, ensure the skill workspace directory is only readable by you. Finally, because the skill can publish videos, be mindful of privacy and publishing settings when instructing an agent to upload on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk978pqpqpawm7yea3dvgq45bn981p1qh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis