tl_video_downloader
v1.0.0下载并合并网络视频（支持B站/抖音/YouTube），当用户说“下载视频+链接”时触发
⭐ 0· 164·1 current·1 all-time
bywangliangyi@roykingw
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (video downloader for B站/抖音/YouTube) match the contained code: main.py checks/installs yt-dlp and ffmpeg and invokes yt-dlp to download and merge video into MP4. The required tools (yt-dlp, ffmpeg) are appropriate for the stated task. There is no request for unrelated credentials or services.
Instruction Scope
SKILL.md restricts runtime behavior to running 'python scripts/main.py --url {url}' and returning only its output, which the script implements. The script will check/install dependencies (pip and system package managers) and perform network operations to download packages and video content, and write files to ~/Downloads. These actions are within the downloader's purpose but represent side effects (system package installs, network access, filesystem writes) users should be aware of.
Install Mechanism
There is no bundle install spec—but main.py attempts runtime installs: 'pip install yt-dlp' and platform-specific system installs for ffmpeg via brew/apt/choco. Using standard package managers and pip is expected for this functionality, but automatic invocation of system-level installers is potentially intrusive (may require privileges, modify the system, or fail). No downloads from obscure URLs or embedded payloads were observed.
Credentials
The skill declares no environment variables and the code does not read secrets or unrelated environment variables. It only uses standard platform/homedir APIs and runs external binaries required for video downloading—proportional to purpose.
Persistence & Privilege
The skill is not always-enabled, does not modify other skills, and does not request persistent elevated privileges. It executes only when invoked per SKILL.md and does not try to change agent-wide configuration.
Assessment
This skill appears to do what it claims, but be aware it will: (1) attempt to run 'pip install yt-dlp' and invoke your system package manager (brew/apt/choco) to install ffmpeg—these are system-level operations that may require privileges and can modify your environment; (2) perform network activity to download packages and the target video; and (3) write downloaded files to ~/Downloads. If you don't want automatic installs or filesystem changes, run the included script manually in a controlled environment (or inspect and run each install step yourself). Only enable this skill if you trust the code owner or are comfortable with the above side effects. If you want higher assurance, run the script in a sandbox/VM or review/modify main.py to remove automatic installers.Like a lobster shell, security has layers — review code before you run it.
latestvk974q2d2v5g7gmevkbrds1z9ss83jt1h
License
MIT-0
Free to use, modify, and redistribute. No attribution required.