ClawHub

YouTube API

v1.0.1

Analyze YouTube workflows with JustOneAPI, including video Details and channel Videos.

⭐ 0· 20·1 current·1 all-time
by@justoneapi
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the provided operations and manifest. Requiring node and JUST_ONE_API_TOKEN is appropriate for a bundled Node helper that calls JustOneAPI endpoints.
✓
Instruction Scope
SKILL.md limits actions to selecting an endpoint, collecting required parameters, and running the included bin/run.mjs to call JustOneAPI. It does not instruct reading unrelated files, other env vars, or exfiltrating data to unexpected endpoints.
✓
Install Mechanism
No install step downloads external code; the skill is instruction+included Node script. The script makes direct HTTPS requests to api.justoneapi.com, which matches the described purpose.
✓
Credentials
Only JUST_ONE_API_TOKEN is required (declared as primaryEnv) and used to populate the API 'token' query parameter. No unrelated credentials or config paths are requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills/configuration. It runs only when invoked.
Assessment
This skill appears to simply call JustOneAPI's YouTube endpoints. Before installing: (1) Confirm the JUST_ONE_API_TOKEN you provide is for JustOneAPI and grant it only the minimal scope needed; (2) be aware that any videoId/channelId you request will be sent to https://api.justoneapi.com; (3) keep the token secret and rotate it if exposed; and (4) if you need stronger assurance, review the skill's bin/run.mjs locally (it's small and readable) and verify network traffic to the expected hostname.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dfbh21cvq78n7a8t96h97yx8497fk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsnode
EnvJUST_ONE_API_TOKEN
Primary envJUST_ONE_API_TOKEN

Comments