ClawHub - YouTube Downloader & Clipper
PassAudited by ClawScan on May 1, 2026.
Overview
This skill is purpose-aligned for downloading or clipping YouTube videos, but users should notice that it can install yt-dlp and run generated Python code locally.
This skill appears coherent for YouTube clipping and downloading. Before installing or invoking it, be aware that it can install yt-dlp via pip, run generated Python locally, and write media files to the current directory or a path you specify.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The first use may install yt-dlp from Python package infrastructure, which could affect the user's environment.
The skill may install an unpinned third-party Python package at use time. This is disclosed and purpose-aligned, but it changes the local Python environment and depends on package-source trust.
If not, auto-install: `pip install yt-dlp`
Prefer installing yt-dlp yourself in a virtual environment or ensure the package source and version are acceptable before using the skill.
Using the skill can run local commands and create or remove a temporary script while downloading media files.
The skill's normal workflow includes creating and running a local Python script to perform the download or clip. This is central to the stated functionality, but it is still local code execution.
Generate and execute Python code ... Use the Write tool to create a temporary Python script ... Execute the script
Run it only for intended YouTube URLs, review unusual output paths, and use a working directory where downloaded files are expected.
