Media Downloader
v0.2.3Download Video/Music from YouTube/Bilibili/X/etc.
⭐ 5· 2.9k·4 current·5 all-time
by@guoqiao
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included script and SKILL.md. The skill requires the 'uv' runner and uses yt-dlp to download media, which is expected for a media downloader. No unrelated services or credentials are requested.
Instruction Scope
Instructions explicitly tell the agent to run the bundled script, capture its stdout path, and (only for Telegram audio) send the file via the messaging tool. This is within scope, but the Telegram-upload step will transmit a local file to an external service — that is functional for this skill but a privacy/leakage consideration the user should expect.
Install Mechanism
No install spec; this is instruction-only with a bundled script. Nothing is downloaded from arbitrary URLs during install. The runtime depends on yt-dlp and Python packages declared in the script header, but those are normal for this functionality.
Credentials
The skill requests no environment variables or credentials. It will read common cookie file paths if provided and write files into ~/Music, ~/Movies/~/Videos (or custom out_dir). Saving files into user home folders and creating info-<id>.json (when verbose) are expected but are notable for privacy and disk usage; no unrelated secrets are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. It executes a local script and writes media to user folders, which is consistent with purpose.
Assessment
This skill appears to do what it says: run the included dl.py to download media via yt-dlp and save into your ~/Music or ~/Videos folders. Before installing, consider: (1) the agent will write files to your home folders and may create info-<id>.json files (especially in verbose mode); (2) if used from Telegram, the skill will upload audio files to the chat — expect that this transmits local files to an external service; (3) the script relies on yt-dlp, ffmpeg (for audio postprocessing), and Python packages — ensure those are installed from trusted sources; (4) copyright and legal risks: downloading some media may be illegal in your jurisdiction; (5) there is a minor code quirk around cookie-file detection (the script checks cookie paths as directories), so cookies may not be used as intended. If you want extra caution, run the script manually in a sandboxed environment first or review/modify dl.py yourself before enabling autonomous invocation.Like a lobster shell, security has layers — review code before you run it.
downloadervk975x9bf7qka0qaxhg5bhq91tn80ynt0latestvk975x9bf7qka0qaxhg5bhq91tn80ynt0mediavk975x9bf7qka0qaxhg5bhq91tn80ynt0youtubevk975x9bf7qka0qaxhg5bhq91tn80ynt0yt-dlpvk975x9bf7qka0qaxhg5bhq91tn80ynt0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦞 Clawdis
OSmacOS · Linux · Windows
Binsuv