Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

YouTube Scheduler

v1.0.0

Phân tích lịch đăng video của kênh YouTube để tìm "khung giờ vàng" — thời điểm đăng có nhiều view và engagement nhất. Dùng khi user yêu cầu "Tìm giờ vàng đăn...

0· 122·0 current·0 all-time
byMCB AI@mcbaivn

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for mcbaivn/youtube-scheduler.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "YouTube Scheduler" (mcbaivn/youtube-scheduler) from ClawHub.
Skill page: https://clawhub.ai/mcbaivn/youtube-scheduler
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install youtube-scheduler

ClawHub CLI

Package manager switcher

npx clawhub@latest install youtube-scheduler
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill's stated purpose (analyze YouTube upload schedule) matches the code: the Python script fetches video metadata and computes best days/hours. However the registry metadata lists no required binaries while the script invokes the external tool 'yt-dlp' via subprocess — that binary is necessary for the skill to function but isn't declared. This is an incoherence (likely an oversight) but impacts usability and trust.
Instruction Scope
SKILL.md instructs the agent/user to run a local Python script with a channel URL and optionally set timezone/limit. The script spawns an external process (yt-dlp) to fetch data from YouTube, parses outputs, and writes a plaintext report under Youtube_Schedule/. The instructions do not request unrelated files, credentials, or other system data. Note: the script will perform network calls (via yt-dlp) and writes output to disk — expected for the task.
Install Mechanism
There is no formal install spec; SKILL.md shows optional install methods that download raw files from raw.githubusercontent.com or clone a GitHub repo. Downloading raw scripts from GitHub is common but has moderate risk if you don't review the code first. The skill does not fetch code from obscure/personal servers or use archive extraction, which reduces risk.
Credentials
The skill requests no environment variables, no credentials, and no config paths. The code does not attempt to read secrets or other environment values. This is proportionate to its stated purpose.
Persistence & Privilege
Skill does not request always:true, does not modify other skills or system-wide agent settings, and only writes its own report file to a local directory. It has normal, limited persistence (output file creation).
What to consider before installing
This skill is largely consistent with its description, but proceed carefully: 1) The Python script calls the external tool 'yt-dlp' (not declared in the metadata). Ensure you have yt-dlp installed and from a trusted source before running. 2) SKILL.md advises downloading raw scripts from GitHub — review the script contents (provided) yourself before executing. 3) The script will make network requests to YouTube (through yt-dlp) and will write a plaintext report to a local folder (Youtube_Schedule). If you are unsure, run it in an isolated environment (VM/container) or inspect/transfer to a trusted package manager that declares dependencies. If the missing yt-dlp declaration concerns you, ask the author to update metadata to list required binaries and to provide a vetted install mechanism.

Like a lobster shell, security has layers — review code before you run it.

latestvk971008943xkgdv6wb6gzx2xq5848kk3mcbaivk971008943xkgdv6wb6gzx2xq5848kk3youtubevk971008943xkgdv6wb6gzx2xq5848kk3
122downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

⏰ YouTube Scheduler Analyzer

Phân tích lịch đăng của kênh → tìm ngày và giờ có hiệu suất cao nhất.

Cài đặt

Cách 1 — Tải skill thẳng từ GitHub (khuyến nghị)

# Windows
$skillDir = "$env:USERPROFILE\.agents\skills\youtube-scheduler"
New-Item -ItemType Directory -Force "$skillDir\scripts" | Out-Null
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-scheduler/SKILL.md" -OutFile "$skillDir\SKILL.md"
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-scheduler/scripts/analyze_schedule.py" -OutFile "$skillDir\scripts\analyze_schedule.py"
# macOS / Linux
mkdir -p ~/.agents/skills/youtube-scheduler/scripts
curl -o ~/.agents/skills/youtube-scheduler/SKILL.md \
  https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-scheduler/SKILL.md
curl -o ~/.agents/skills/youtube-scheduler/scripts/analyze_schedule.py \
  https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-scheduler/scripts/analyze_schedule.py

Cách 2 — Clone toàn bộ repo

# Windows
git clone https://github.com/mcbaivn/openclaw-skills-mcbai.git
Copy-Item -Recurse openclaw-skills-mcbai\skills\youtube\youtube-scheduler $env:USERPROFILE\.agents\skills\
# macOS / Linux
git clone https://github.com/mcbaivn/openclaw-skills-mcbai.git
cp -r openclaw-skills-mcbai/skills/youtube/youtube-scheduler ~/.agents/skills/

Sử dụng

python scripts/analyze_schedule.py <channel_url> [--limit N] [--tz Asia/Ho_Chi_Minh]

Ví dụ:

  • Tìm giờ vàng @MrBeastpython scripts/analyze_schedule.py https://youtube.com/@MrBeast --limit 50
  • Đổi timezone → thêm --tz Asia/Ho_Chi_Minh (mặc định UTC)

Output

Youtube_Schedule/
└── [Channel]_schedule_DD_MM_YYYY.txt

Báo cáo gồm:

  • 📅 Ngày trong tuần tốt nhất (sắp xếp theo avg views)
  • ⏰ Khung giờ vàng (0-23h, theo avg views)
  • 🗺️ Heatmap Ngày × Giờ (ASCII)
  • 🏆 Top 5 video views cao nhất với ngày/giờ đăng
  • 💡 Khuyến nghị lịch đăng tối ưu

Lưu ý

  • Phân tích dựa trên --limit video gần nhất (khuyến nghị 30-100 video).
  • Mặc định timezone UTC, dùng --tz để chuyển sang giờ địa phương.
  • Kết quả là ước tính thống kê từ dữ liệu lịch sử, không phải đảm bảo tuyệt đối.

Comments

Loading comments...