Download AIO

Download videos, audio, playlists, subtitles, and thumbnails from ANY platform (YouTube, TikTok, Instagram, Facebook, Twitter/X, Twitch, Vimeo, SoundCloud, R...

Security Scan

The skill's purpose (download via yt-dlp) matches its instructions, but the package is missing the installation scripts it repeatedly references and it instructs actions that can expose sensitive browser cookies and install software — review before running.

Purpose & Capability

Name/description match the instructions: the skill is a wrapper around yt-dlp to download media and (when small) send it to Telegram. Commands and options in references/*.md align with yt-dlp usage and the stated features.

Instruction Scope

SKILL.md instructs the agent to run PowerShell install/check scripts (scripts/install.ps1, scripts/check.ps1, scripts/find-python.ps1) and to use yt-dlp options including --cookies-from-browser. However, the distributed package does not include the scripts directory or those .ps1 files (file manifest lists docs only). Also, instructions propose using --cookies-from-browser which will cause access to browser cookie stores (sensitive) — this is outside mere downloading and can expose credentials. The auto-send-to-Telegram flow uses the agent's message tool (expected) but you should confirm which Telegram account/channel will be used.

Install Mechanism

There is no formal install spec bundled with the skill (instruction-only). The docs tell users to run scripts that would install Python packages and ffmpeg via pip/Chocolatey, but those scripts are not present in the package. That mismatch is a red flag: the skill promises an auto-install but doesn't ship the code to do it. Running ad-hoc installer commands from docs (if copy-pasted) would still install networked binaries and write to disk — review any install script before running.

Credentials

The skill declares no required environment variables or credentials (ok), but its instructions encourage using --cookies-from-browser chrome to access logged-in content. That causes client-side browser cookie access (sensitive). It also copies files into the agent workspace path ($env:USERPROFILE\.openclaw\workspace) which is expected for sending, but you should confirm the message tool's configured channels. Overall, requested/encouraged access to cookies and local installs is disproportionate to a passive 'download' description unless the user explicitly wants logged-in/private content.

Persistence & Privilege

The skill does not request always:true and is user-invocable only. It does instruct the user to copy the skill into the agent skills directory (standard). It does not request system-wide config changes or other skills' credentials.

What to consider before installing

This skill appears to be a friendly wrapper around yt-dlp, but there are two practical concerns you should address before installing or running it: 1) Missing installer scripts: The README and SKILL.md instruct you to run scripts/install.ps1, check.ps1, and find-python.ps1, but the package you received does not include a scripts/ folder or those .ps1 files. Do not run random install commands copied from the docs until you obtain and inspect the actual scripts. Ask the publisher for the missing scripts or a verified installer, and review them to ensure they don't run unexpected commands. 2) Sensitive access: The skill encourages using --cookies-from-browser chrome to download private content. That gives yt-dlp access to browser cookies (which can include login tokens). Only use that option if you understand the privacy implications and trust the environment. Also confirm which Telegram account/channel the agent's message tool will use before allowing automatic uploads. Other practical tips: if you want to try it, run it in a sandboxed account or VM, manually run and inspect any installer code, and keep yt-dlp/ffmpeg installs limited to user scope. If you cannot obtain the missing scripts for review, classify this package as incomplete/untrusted.

Download AIO Skill

Tải video, audio, playlist, subtitle, thumbnail từ 1000+ nền tảng bằng yt-dlp. Sau khi tải tự động gửi file về Telegram nếu dung lượng <= 50MB.

Cài đặt (chạy lần đầu)

Trước khi dùng, chạy script cài đặt để kiểm tra và cài đầy đủ dependencies:

powershell -ExecutionPolicy Bypass -File scripts/install.ps1

Script sẽ tự động:

1. Kiểm tra Python → hướng dẫn cài nếu thiếu
2. Cài yt-dlp
3. Kiểm tra ffmpeg → cài qua Chocolatey nếu thiếu
4. Tạo thư mục Downloads mặc định
5. Verify toàn bộ setup

Cách dùng (User Guide)

Cách đơn giản nhất

Chỉ cần paste URL vào chat là xong:

https://www.youtube.com/watch?v=...
https://www.tiktok.com/@user/video/...
https://www.facebook.com/reel/...

Agent sẽ tự tải về + gửi vào Telegram.

Tùy chỉnh nâng cao

Có thể yêu cầu cụ thể hơn:

• "Tải audio mp3 từ [URL]"
• "Tải playlist này, chỉ lấy 10 video đầu: [URL]"
• "Tải video 720p từ [URL]"
• "Tải phụ đề tiếng Việt từ [URL]"
• "Tải thumbnail từ [URL]"

Workflow

Step 1: Kiểm tra dependencies

Chạy scripts/check.ps1 để verify yt-dlp và ffmpeg có sẵn. Nếu thiếu, chạy scripts/install.ps1.

Step 2: Xác định yêu cầu

Thu thập từ user (nếu không có thì dùng default):

Tham số	Default	Tùy chọn
URL	(bắt buộc)	-
Loại tải	video	video / audio / playlist / subtitle / thumbnail
Chất lượng	best	best / 1080p / 720p / 480p / 360p
Format	mp4 (video), mp3 (audio)	mp4 / webm / mkv / mp3 / m4a
Thư mục lưu	Downloads\yt-dlp\	bất kỳ đường dẫn nào

Step 3: Chạy lệnh tải

Xem references/commands.md để lấy lệnh đúng cho từng use case.

Lệnh cơ bản nhất (video best quality):

$PYTHON = scripts/find-python.ps1  # tự detect Python path
& $PYTHON -m yt_dlp `
  -f "bestvideo[ext=mp4]+bestaudio[ext=m4a]/best[ext=mp4]/best" `
  --merge-output-format mp4 `
  -o "$env:USERPROFILE\Downloads\yt-dlp\%(title)s.%(ext)s" `
  "<URL>"

Step 4: Gửi về Telegram (auto)

Sau khi tải xong:

$file = Get-ChildItem "$env:USERPROFILE\Downloads\yt-dlp\" | Sort-Object LastWriteTime -Descending | Select-Object -First 1
$sizeMB = [math]::Round($file.Length / 1MB, 2)

• File <= 50MB:

  1. Copy file vào workspace tạm: $env:USERPROFILE\.openclaw\workspace\tmp_send.<ext>
  2. Dùng message tool: action=send, filePath=workspace path, caption="✅ {title} ({sizeMB}MB)"
  3. Xóa file tạm sau khi gửi xong

• File > 50MB: Báo user "File {sizeMB}MB vượt giới hạn 50MB của Telegram. Đã lưu tại: {path}"

• Nếu lỗi khi gửi: thông báo lỗi + đường dẫn file trên máy

Nền tảng hỗ trợ

Xem references/platforms.md để biết danh sách đầy đủ và lưu ý riêng cho từng nền tảng.

Các nền tảng phổ biến: YouTube, TikTok, Facebook, Instagram, Twitter/X, Twitch, Vimeo, SoundCloud, Reddit, Bilibili, Dailymotion, Pinterest, LinkedIn...

Xử lý lỗi

Xem references/troubleshooting.md để xử lý các lỗi thường gặp:

• Lỗi cài đặt / không tìm thấy Python
• HTTP 429 (rate limit)
• Bot detection / cần đăng nhập
• ffmpeg not found
• File quá lớn

Lưu ý quan trọng

• Playlist > 50 video: hỏi user muốn tải bao nhiêu trước khi chạy
• Nội dung private (Instagram, Twitter): dùng --cookies-from-browser chrome
• Rate limit: thêm --sleep-interval 3 --max-sleep-interval 8
• Update yt-dlp thường xuyên: python -m pip install -U yt-dlp