视频下载与转录(Whisper)
v1.0.0下载无法直接访问的视频网站内容（如B站、YouTube等），提取音频后用Whisper转录成文字。适用场景：用户要求分析某个视频内容，但链接被封锁无法直接访问；需要获取视频完整文字稿进行深度分析。
⭐ 0· 43·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description ask to download videos and transcribe them; required binaries (yt-dlp, ffmpeg, whisper) and the two shell scripts directly implement that flow. No unrelated services, credentials, or binaries are requested.
Instruction Scope
Instructions and scripts stay within the expected workflow (resolve redirect, yt-dlp download, ffmpeg extract, whisper transcribe). One notable instruction suggests using yt-dlp's --cookies-from-browser option (or supplying cookies) for member-only content — this legitimately requires access to browser cookies/session tokens and therefore raises a privacy consideration (not a code-level red flag). The SKILL.md includes an example hardcoded user path for Whisper; the scripts handle locating whisper via PATH as a fallback.
Install Mechanism
This is instruction-only (no install spec that downloads arbitrary archives). The README suggests installing yt-dlp/ffmpeg/whisper via common package managers (pip/brew), which is proportional and expected.
Credentials
The skill declares no required environment variables or credentials, which is appropriate. However, recommending --cookies-from-browser or a cookies file can cause the user to expose browser session cookies (sensitive) — the skill does not require or declare any env-vars but does encourage accessing local browser credentials for gated content.
Persistence & Privilege
always:false and normal user-invocable settings. The scripts operate on user-specified output dirs (default /tmp) and the skill asks to chmod its own scripts in the workspace; it does not request persistent elevated privileges or modify other skills/configuration.
Assessment
This skill is coherent for downloading and transcribing videos, but before installing or running it: 1) only run on content you are allowed to download (copyright/legal risk); 2) be careful if following the suggestion to use browser cookies or --cookies-from-browser — that exposes your browser session tokens/accounts; only supply cookies you trust and consider running in an isolated account/container; 3) install yt-dlp, ffmpeg and whisper from trusted package sources (pip, Homebrew, official releases); 4) note Whisper will download models (large disk/CPU use) and scripts write files to /tmp or chosen output dirs — don't run as root or on sensitive hosts; 5) source is unknown: review the two included scripts (they are short and straightforward) and prefer running them in a controlled environment if you have any doubt.Like a lobster shell, security has layers — review code before you run it.
latestvk972jtt5xd5jpqaykcqvbxdzvd83pxk9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
OSmacOS · Linux · Windows
Binsyt-dlp, ffmpeg, whisper