you-get

网页媒体下载助手 - 从YouTube、Bilibili等网站下载视频、音频、图片

Security Scan

The skill largely matches a downloader helper, but some runtime instructions and metadata are inconsistent or over-broad (notably accessing browser cookie DB paths and a mislabeled primary credential), so review before installing.

Purpose & Capability

Name/description (web media downloader) match the requested binaries (python, you-get, ffmpeg) and example commands. Asking for you-get/ffmpeg is proportionate to the stated purpose. However, metadata sets primaryEnv to 'python' which is not a credential name and is incoherent with the platform's primaryEnv usage.

Instruction Scope

SKILL.md and guides instruct the agent to run arbitrary shell commands (install, download, play) which is expected for a downloader, but they also explicitly reference sensitive local paths (e.g. ~/.mozilla/firefox/xxxxx/cookies.sqlite) and recommend exporting/using browser cookies. Those file accesses are outside declared config paths and may expose authentication data. The troubleshooting guide also suggests disabling firewalls (sudo ufw disable) as a diagnostic step, which is risky guidance.

Install Mechanism

No install spec (instruction-only). That is low-risk from install mechanics perspective — nothing is fetched or executed by an installer provided in the skill bundle.

Credentials

The skill declares no required env vars or credentials, which mostly aligns with its function. But it instructs use of cookies files and direct references to browser cookie DBs (sensitive credentials) without declaring config path requirements. The primaryEnv metadata value ('python') is misused and misleading.

Persistence & Privilege

always is false and model invocation is permitted (defaults). The skill does not request persistent presence or modify other skills. No elevated persistence privileges are requested.

What to consider before installing

This skill is basically a wrapper around the well-known you-get tool and is coherent for downloading media. However: 1) the guides instruct the agent to read browser cookie files (e.g. cookies.sqlite) to download login-protected content — that can expose your login state and should only be done if you trust the agent and are comfortable with that risk; 2) the skill's metadata sets primaryEnv to 'python', which looks like a misconfiguration and not a credential — ignore that or ask the author to correct it; 3) some troubleshooting advice (temporarily disabling firewall) is unsafe — avoid disabling security controls on your system; 4) because the skill will run shell commands and can access local files, only install it if you trust the source and understand it will execute you-get/ffmpeg commands on your machine. If you want to be cautious, run the commands manually in a controlled environment (or run you-get locally) rather than granting the agent direct execution rights.

you-get 网页媒体下载助手

技能概述

本技能帮助用户从Web下载媒体内容（视频、音频、图片），支持以下场景：

• 视频下载: 从YouTube、Bilibili、优酷等网站下载视频
• 音频下载: 从SoundCloud、网易云音乐等下载音频
• 图片下载: 从Tumblr、Instagram等下载图片
• 在线观看: 使用本地播放器观看在线视频（无广告）

支持网站: YouTube, Twitter, Bilibili, 优酷, 爱奇艺, Instagram, Tumblr, SoundCloud 等 80+ 网站

使用流程

AI 助手将引导你完成以下步骤：

1. 安装 you-get（如未安装）
2. 查看可下载的视频质量
3. 选择格式并下载
4. 验证下载结果

关键章节导航

• 安装指南
• 快速开始
• 高级用法
• 常见问题

AI 助手能力

当你向 AI 描述下载需求时，AI 会：

• 自动识别网址支持的网站
• 查看所有可用的视频质量和格式
• 执行下载命令并监控进度
• 处理下载失败并提供替代方案
• 支持断点续传和批量下载
• 提取视频字幕和元数据

核心功能

• ✅ 支持 80+ 主流视频/音频网站
• ✅ 自动选择最佳质量下载
• ✅ 支持指定格式和分辨率
• ✅ 支持断点续传
• ✅ 支持代理下载
• ✅ 支持在线播放
• ✅ 自动下载字幕
• ✅ 支持cookies登录下载

快速示例

# 下载YouTube视频
you-get 'https://www.youtube.com/watch?v=jNQXAC9IVRw'

# 查看可用格式
you-get -i 'https://www.youtube.com/watch?v=jNQXAC9IVRw'

# 指定格式下载
you-get --itag=18 'https://www.youtube.com/watch?v=jNQXAC9IVRw'

# 使用代理
you-get -x 127.0.0.1:8087 'https://www.youtube.com/watch?v=jNQXAC9IVRw'

安装要求

• Python 3.7.4 或更高版本
• FFmpeg 1.0 或更高版本（用于视频合并）
• （可选）RTMPDump（用于RTMP流）

许可证

MIT License

项目链接

• GitHub: https://github.com/soimort/you-get
• 官网: https://you-get.org/
• 文档: https://github.com/soimort/you-get/wiki