Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Facebook Video Downloader

v1.0.0

Download Facebook videos, Reels, and Stories in HD quality. Use when user provides a Facebook video URL and wants to download it, or asks to save/download FB...

0· 218·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for frankchen622/facebook-video-downloader.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Facebook Video Downloader" (frankchen622/facebook-video-downloader) from ClawHub.
Skill page: https://clawhub.ai/frankchen622/facebook-video-downloader
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install facebook-video-downloader

ClawHub CLI

Package manager switcher

npx clawhub@latest install facebook-video-downloader
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's stated purpose (download Facebook videos) matches the code: the Python script posts the supplied Facebook URL to savefbs.com and returns links. However, the manifest declares no required runtime (binaries/dependencies) even though the script needs python3 and the requests library. Also the SKILL.md claims 'No data collection' and 'not logged' while the code explicitly sends user URLs to an external service — that is a data transmission not justified by the privacy claim.
!
Instruction Scope
Runtime instructions tell the agent to run scripts/fetch_fb_video.py with the user's Facebook URL; the script performs an HTTP POST to https://savefbs.com/api/v1/aio/search. That means user-supplied URLs are sent to a third party. There are no instructions or safeguards about handling private/restricted URLs, consent, or whether the external service logs requests. No other system files or env vars are accessed, which is good, but the external transmission of potentially sensitive URLs is a material scope concern.
Install Mechanism
There is no install spec (instruction-only with an included Python script). This is lower risk than arbitrary downloads, but the package omits declaring that python3 and the requests library are required. The script will fail without those dependencies; the absence of a declared runtime requirement is a small coherence issue.
Credentials
The skill requests no environment variables, credentials, or special config paths — which is appropriate for its stated purpose. The only notable external dependency is the savefbs.com API endpoint the script calls; no secrets are requested or stored by the skill itself.
Persistence & Privilege
The skill does not request persistent/always-on presence and does not modify other skills or system configs. It runs only when invoked, which is proportionate to its functionality.
What to consider before installing
This skill will send any Facebook URL you provide to savefbs.com to obtain download links — that is external network access and may expose URLs (and their metadata) to the third party, despite the SKILL.md privacy claims. Before installing or using it: (1) review savefbs.com's privacy policy and trustworthiness; (2) avoid using private or restricted Facebook URLs (don’t paste login-only or personal/group content you don't want shared); (3) be aware downloading some Facebook content may violate Facebook's Terms of Service or copyright law; (4) run the script in an isolated environment and ensure python3 + requests are installed; and (5) if you need stronger privacy guarantees, prefer a solution that does not forward URLs to third parties or self-host an audited scraper/service.

Like a lobster shell, security has layers — review code before you run it.

facebook-video-downloadervk97bfq6jqrs1y60arw4cm94k958356a8latestvk97bfq6jqrs1y60arw4cm94k958356a8social-mediavk97bfq6jqrs1y60arw4cm94k958356a8videovk97bfq6jqrs1y60arw4cm94k958356a8
218downloads
0stars
1versions
Updated 11h ago
v1.0.0
MIT-0

Facebook Video Downloader

🔒 Security Notice

This skill is safe and transparent:

  • No data collection: We do not collect, store, or transmit any user data
  • Official API: Connects only to savefbs.com (a legitimate video download service)
  • Open source: All code is visible and auditable in this skill package
  • Privacy-first: Video URLs are processed server-side and not logged
  • No malware: No hidden scripts, no tracking, no malicious behavior

The skill simply acts as a bridge between OpenClaw and the savefbs.com API to help users download public Facebook videos for personal use.

Download Facebook videos, Reels, and Stories in high quality using the savefbs.com service.

When to Use

Activate this skill when:

  • User shares a Facebook video URL (facebook.com/watch, fb.watch, facebook.com/reel, etc.)
  • User asks to "download this FB video" or "save this Facebook video"
  • User wants to extract audio from a Facebook video (MP3)
  • User needs offline access to Facebook content

How It Works

This skill uses a Python script that connects to the savefbs.com API to fetch download links.

Usage

python3 scripts/fetch_fb_video.py <facebook_video_url>

Example

python3 scripts/fetch_fb_video.py "https://www.facebook.com/watch?v=123456789"

Output Format

The script returns JSON with download options:

{
  "success": true,
  "title": "Video Title",
  "thumbnail": "https://...",
  "downloads": [
    {
      "quality": "HD",
      "url": "https://...",
      "extension": "mp4"
    },
    {
      "quality": "SD",
      "url": "https://...",
      "extension": "mp4"
    },
    {
      "quality": "Audio",
      "url": "https://...",
      "extension": "mp3"
    }
  ]
}

Workflow

  1. Extract the URL: Get the Facebook video URL from the user's message
  2. Run the script: Execute fetch_fb_video.py with the URL
  3. Parse results: Present download options to the user (HD, SD, MP3)
  4. Provide links: Share the download URLs or offer to download directly

Supported Content

  • Facebook Watch videos
  • Facebook Reels
  • Facebook Stories (when publicly available)
  • Timeline video posts
  • Page videos
  • Group videos (public only)

Limitations

  • Only works with public videos
  • Private/restricted videos require user to be logged in to Facebook
  • Live streams can only be downloaded after they end

Error Handling

If the script returns "success": false, check:

  • Is the URL valid and accessible?
  • Is the video public?
  • Is the video still available on Facebook?

Common error messages:

  • "Network error": Connection issue with savefbs.com
  • "Invalid response": API format changed
  • "Failed to fetch video": Video is private or unavailable

Comments

Loading comments...