Game Scout

This skill appears coherent with its purpose, but before installing consider the following: (1) It sends URLs and extracted content to two third-party services (Exa AI and Bright Data). Only install if you trust those providers and are comfortable with your queries and scraped content being transmitted to them. (2) Use least-privilege API keys / separate accounts where possible and avoid putting high-value secrets in the same env. (3) Bright Data is explicitly used to bypass bot detection on some sites — this may conflict with site terms of service or legal restrictions in some jurisdictions; review Bright Data’s and target sites' TOS if that matters to you. (4) Don’t feed private/internal URLs or credentials into the skill: any URL you ask the skill to fetch may be sent to Bright Data/Exa. (5) yt-dlp runs as a subprocess to fetch transcripts; ensure your environment allows that and that you trust the videos you request. If you want a higher assurance review, provide logs or sample runs (with sanitized inputs) so network calls and outputs can be inspected.

Static analysis detected API credential-access patterns, but both VirusTotal and OpenClaw confirmed this skill is safe. These patterns are common in legitimate API integration skills.