Youtube Apify Transcript
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears purpose-aligned for fetching YouTube transcripts through Apify, but users should notice the third-party API use, required token, local transcript cache, and unpinned Python dependency.
Before installing, confirm you are comfortable sending YouTube URLs to Apify, using an Apify token that can spend quota, and keeping transcript caches locally. The observed behavior is coherent with the skill’s stated purpose, but review the dependency install and cache location if you use it in a sensitive environment.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your requested YouTube URLs are processed through Apify, and use may consume Apify credits or implicate YouTube access policies.
The skill intentionally routes transcript requests through Apify/proxies to work around YouTube cloud-IP blocking. This is disclosed and purpose-aligned, but users should understand the external service and policy/cost implications.
APIFY runs the request through residential proxies, bypassing bot detection reliably.
Use only for videos you intend to process, monitor Apify billing, and make sure this use is acceptable for your environment.
The skill can make Apify API calls under your Apify account and may consume your account quota or credits.
The script uses the APIFY_API_TOKEN as a bearer token when calling Apify. This is expected for the integration, and the artifacts do not show unrelated credential use or token logging.
"Authorization": f"Bearer {api_token}"Use a dedicated Apify token if possible, keep it out of committed files, and revoke or rotate it if you stop using the skill.
Anyone with access to the cache directory may see which videos were fetched and their transcript contents.
Fetched transcript text and raw Apify results are written into local cache files. This is disclosed caching, but it persists video/transcript history across runs.
"full_text": raw_text,
"_raw_result": result # Keep original for full fidelityClear the cache for sensitive videos, or set YT_TRANSCRIPT_CACHE_DIR to a location with appropriate access controls.
Installation may fetch the latest available package version from the Python package ecosystem rather than a pinned version.
The skill depends on installing the unpinned 'requests' package. This is a normal dependency for HTTP API calls, but it is still an external supply-chain dependency.
"kind": "pip",
"package": "requests"Install dependencies from trusted package indexes and consider pinning or auditing dependency versions in controlled environments.