YouTube Subtitle Extractor

Tải phụ đề (SRT/VTT/TXT) từ video YouTube bằng yt-dlp. Hỗ trợ auto-generated và manual subtitles, đa ngôn ngữ. Dùng khi user yêu cầu "Tải phụ đề video X", "G...

Security Scan

The skill appears to do what it says (download YouTube subtitles) and the included script is small and readable, but the package metadata and SKILL.md omit required external binaries (yt-dlp and likely ffmpeg) and the install instructions pull raw files from a GitHub account without provenance — these inconsistencies warrant caution.

Purpose & Capability

The skill's purpose is subtitle extraction, which legitimately requires an external downloader (yt-dlp) and often ffmpeg for conversions. However the registry metadata declares no required binaries and SKILL.md does not tell the user to install yt-dlp/ffmpeg. That mismatch (a tool that clearly depends on external binaries but doesn't declare them) is inconsistent and could surprise users.

Instruction Scope

SKILL.md and the script stay on-purpose: they instruct downloading the SKILL.md and script from a GitHub repo and running a local Python script which calls yt-dlp to fetch subtitles and write files to disk. The instructions do not ask the agent to read unrelated files, exfiltrate data to third-party endpoints, or access credentials.

Install Mechanism

Installation instructions are manual and fetch raw files from raw.githubusercontent.com (a common pattern). This is a moderate-risk pattern because it executes code pulled directly from a GitHub account without a release signature; verify the repository and commit history before running. There is no automated install spec, and no archive extraction from unknown URLs.

Credentials

The skill requires no environment variables or credentials, which is appropriate for its stated purpose. However it does rely on external binaries (yt-dlp and possibly ffmpeg) that are not declared in the metadata — this is not a credential leak but is a proportionality/declared-requirements omission.

Persistence & Privilege

The skill does not request 'always: true', does not modify other skills or system-wide agent settings, and does not persist credentials. It writes subtitle files to the local filesystem (Youtube_Subtitles/), which is expected behavior for this functionality.

What to consider before installing

This skill's code is small and consistent with subtitle extraction, but it has two practical issues to consider before installing: 1) Missing declared dependencies: The script runs the yt-dlp binary (and --convert-subs may require ffmpeg). The skill metadata does not list these required binaries. Install and verify yt-dlp (and ffmpeg if needed) from trusted sources before running. 2) Source provenance: SKILL.md recommends downloading raw files from a GitHub account. Verify the repository/author (mcbaivn) and review the fetched files yourself before running them. Prefer cloning a known repo tag or a signed release if available. 3) Disk and network behavior: Running the tool causes network downloads from YouTube (via yt-dlp) and writes files to your filesystem (Youtube_Subtitles/). If you run it against a channel without --limit, it may download many videos' subtitles; use --limit to avoid large downloads. 4) Safety posture: If you have concerns, run the script in a sandbox or isolated environment, inspect the downloaded script for unexpected functionality, and ensure yt-dlp/ffmpeg come from official sources. If you need help verifying the GitHub source or the binaries, ask for guidance.

Tải phụ đề từ video hoặc kênh YouTube, xuất ra file .srt sạch.

Cài đặt

Cách 1 — Tải skill thẳng từ GitHub (khuyến nghị)

# Windows
$skillDir = "$env:USERPROFILE\.agents\skills\youtube-subtitle-extractor"
New-Item -ItemType Directory -Force "$skillDir\scripts" | Out-Null
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-subtitle-extractor/SKILL.md" -OutFile "$skillDir\SKILL.md"
Invoke-WebRequest -Uri "https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-subtitle-extractor/scripts/extract_subtitles.py" -OutFile "$skillDir\scripts\extract_subtitles.py"

# macOS / Linux
mkdir -p ~/.agents/skills/youtube-subtitle-extractor/scripts
curl -o ~/.agents/skills/youtube-subtitle-extractor/SKILL.md \
  https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-subtitle-extractor/SKILL.md
curl -o ~/.agents/skills/youtube-subtitle-extractor/scripts/extract_subtitles.py \
  https://raw.githubusercontent.com/mcbaivn/openclaw-skills-mcbai/main/skills/youtube/youtube-subtitle-extractor/scripts/extract_subtitles.py

Cách 2 — Clone toàn bộ repo

# Windows
git clone https://github.com/mcbaivn/openclaw-skills-mcbai.git
Copy-Item -Recurse openclaw-skills-mcbai\skills\youtube\youtube-subtitle-extractor $env:USERPROFILE\.agents\skills\

# macOS / Linux
git clone https://github.com/mcbaivn/openclaw-skills-mcbai.git
cp -r openclaw-skills-mcbai/skills/youtube/youtube-subtitle-extractor ~/.agents/skills/

Sử dụng

python scripts/extract_subtitles.py <video_or_channel_url> [--lang vi,en] [--format srt] [--auto]

Ví dụ:

• Tải phụ đề từ https://youtu.be/xxxx → python scripts/extract_subtitles.py https://youtu.be/xxxx
• Tải phụ đề tiếng Việt → thêm --lang vi
• Chỉ lấy auto-generated → thêm --auto

Output

Youtube_Subtitles/
└── [Video_Title]/
    ├── [title].vi.srt
    ├── [title].en.srt
    └── [title]_plain.txt    (plain text không có timestamp)

Lưu ý

• Ưu tiên manual subtitles trước, fallback sang auto-generated nếu không có.
• File _plain.txt dùng để đưa vào youtube-content-analyzer.
• Nếu URL là kênh, tải phụ đề tất cả video trong kênh (giới hạn với --limit N).