Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

下载视频的技能

v1.0.0

使用yt-dlp和ffmpeg下载各种网站的视频。支持YouTube、B站、抖音等所有yt-dlp支持的网站。当用户要求下载视频、保存视频、抓取视频时调用此技能。

0· 196·1 current·2 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for heihu123/douyin-download-video.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "下载视频的技能" (heihu123/douyin-download-video) from ClawHub.
Skill page: https://clawhub.ai/heihu123/douyin-download-video
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install douyin-download-video

ClawHub CLI

Package manager switcher

npx clawhub@latest install douyin-download-video
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The name/description match the actual code: the script uses yt-dlp to download and merge streams and uses ffmpeg for merging. There are no unrelated credentials, binaries, or config paths requested. The script implements quality/format/output options as described.
Instruction Scope
SKILL.md and the script largely agree on behavior (command-line usage, default ~/Downloads, auto-install yt-dlp). Minor inconsistencies: SKILL.md claims ffmpeg will be downloaded to a .trae/skills/... path, but the script downloads and installs ffmpeg under the script directory (SCRIPT_DIR/ffmpeg). Also SKILL.md implies automatic ffmpeg setup generally, but the script's automatic ffmpeg download is implemented only for Windows and exits on non-Windows platforms. The runtime instructions do not attempt to read unrelated system files or credentials.
!
Install Mechanism
There is no external install spec, but the script performs a network download and extraction of an FFmpeg ZIP from https://www.gyan.dev/ffmpeg/builds/ffmpeg-release-essentials.zip (third-party build host) and extracts it to disk. The script writes files to disk (extract and move operations). It also runs `pip install --upgrade yt-dlp` if yt-dlp is not present. Downloading and extracting an archive from a non-official host is a moderate risk and should be reviewed before use; the behavior is expected for this purpose but the source should be vetted.
Credentials
The skill requests no environment variables or credentials. It briefly consults the TEMP environment variable to pick a temporary path (typical). No secrets are collected or required by the code.
Persistence & Privilege
The skill does not request permanent platform privileges (always: false) and does not modify other skills. It writes files to the script directory (ffmpeg) and to the user's Downloads directory for downloaded videos. This file writing is expected for the stated purpose but you should be aware of where files are created.
Assessment
This skill appears to do what it says (download videos with yt-dlp and ffmpeg), but before installing or running it consider the following: - Network downloads: the script will download an FFmpeg ZIP from gyan.dev (a third‑party Windows build provider) and will run pip to install/upgrade yt-dlp. If you need higher assurance, manually install ffmpeg and yt-dlp and re-run the script. - Platform behavior: automatic ffmpeg download is implemented only for Windows; on other OSes the script exits and asks you to install ffmpeg yourself. SKILL.md's description about ffmpeg path differs from the script's implementation (script uses its own directory, not necessarily .trae/skills/...). - File writes: the script extracts files into its own directory and saves downloaded videos to ~/Downloads (or the user-specified output). Ensure you are comfortable with these write locations. - Legal/privacy: downloading content may violate terms of service or copyright law; avoid downloading protected content you do not have rights to. - Safety steps: review the downloaded ffmpeg zip URL manually, run the script in an isolated environment (VM or container) if possible, or install yt-dlp/ffmpeg yourself and run the script with network disabled to reduce risk. If you want me to, I can produce a hardened version that skips automatic ffmpeg download and instead checks for an existing ffmpeg on PATH and gives clearer paths for where it writes files.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cspn5ydm48q7ynb8s4re9k1838ztf
196downloads
0stars
1versions
Updated 15h ago
v1.0.0
MIT-0

视频下载器

使用yt-dlp和ffmpeg下载各种网站的视频,支持所有yt-dlp支持的网站。

功能特点

  • 支持所有yt-dlp支持的网站(YouTube、B站、抖音、快手、Instagram、Twitter等)
  • 自动下载并合并视频和音频流
  • 默认下载1080p MP4格式
  • 自动安装和更新yt-dlp
  • 自动检测和使用ffmpeg进行视频合并

快速开始

最简单的下载方式:

python download_video.py "视频URL"

这会下载视频到用户下载目录(~/Downloads),文件名使用视频标题。

技能会自动:

  • 下载并设置ffmpeg(如果未安装)
  • 检查并安装yt-dlp(如果未安装)
  • 合并视频和音频流

选项

质量设置

使用-q--quality指定视频质量:

  • best:最高质量
  • 1080p:全高清(默认)
  • 720p:高清
  • 480p:标清
  • 360p:较低质量

示例:

python download_video.py "URL" -q 1080p

格式选项

指定输出格式:

  • mp4(默认):最兼容的格式
  • webm:现代格式
  • mkv:Matroska容器

示例:

python download_video.py "URL" -q 1080p

只下载音频

使用-a--audio-only只下载音频:

python download_video.py "URL" -a

自定义输出目录

使用-o--output指定输出目录:

python download_video.py "URL" -o "D:/Videos"

完整示例

  1. 下载1080p MP4视频到用户下载目录:
python download_video.py "https://www.youtube.com/watch?v=VIDEO_ID"
  1. 下载B站视频:
python download_video.py "https://www.bilibili.com/video/BV..."
  1. 只下载音频为MP3:
python download_video.py "URL" -a
  1. 下载720p视频:
python download_video.py "URL" -q 720p
  1. 下载到指定目录:
python download_video.py "URL" -o "D:/Videos"

工作原理

技能使用yt-dlpffmpeg

  • 自动下载并设置ffmpeg(如果未安装)
  • 自动检查并安装yt-dlp(如果未安装)
  • 获取视频信息
  • 选择最佳的视频和音频流
  • 使用内置ffmpeg合并视频和音频流
  • 支持广泛的视频网站和格式

重要说明

  • 默认下载到用户下载目录:~/Downloads
  • 视频文件名自动从视频标题生成
  • ffmpeg会自动下载到技能目录(.trae/skills/视频下载器/ffmpeg/
  • 较高质量的视频可能需要更长的下载时间和更多磁盘空间
  • 某些网站可能需要使用浏览器cookies进行认证

使用浏览器cookies(可选)

对于需要登录的视频,可以使用浏览器cookies:

yt-dlp "URL" --cookies-from-browser chrome
yt-dlp "URL" --cookies-from-browser edge
yt-dlp "URL" --cookies-from-browser firefox

常见问题

  1. 403 Forbidden错误:YouTube等网站的反爬虫机制,可以尝试:

    • 更新yt-dlp:pip install --upgrade yt-dlp
    • 使用浏览器cookies
    • 筭待一段时间后重试
  2. 视频质量不理想:尝试使用不同的格式选择器或使用浏览器cookies

  3. ffmpeg下载失败:如果自动下载ffmpeg失败,可以手动下载并解压到技能目录的ffmpeg/文件夹

Comments

Loading comments...