油管视频转音频到飞书

Download YouTube video audio and upload to Feishu cloud storage

Security Scan

The skill's code, instructions, and requirements are consistent with its stated purpose (download YouTube audio and upload to Feishu); nothing in the bundle suggests covert data exfiltration or unrelated privileges.

Purpose & Capability

Name/description match the included code and SKILL.md. The package includes Python scripts and a Node tool wrapper that call yt-dlp to download audio and rely on OpenClaw/Feishu integration calls to upload/send; required binaries (python, yt-dlp) are appropriate for the task.

Instruction Scope

SKILL.md and the Python/JS code confine actions to: fetching YouTube metadata, running yt-dlp to download/convert audio, storing files in a local temp directory, calling platform Feishu upload/message tools, and cleaning temp files. There are no instructions to read unrelated system files or to transmit arbitrary data to external endpoints beyond YouTube and Feishu integrations.

Install Mechanism

No remote download/install steps are embedded; dependencies are standard (yt-dlp via pip). This is low-risk compared to arbitrary URL downloads or unpacking remote archives.

Credentials

The skill declares only FEISHU_USER_ID as a required env var (reasonable to identify the recipient). However, actual Feishu uploads require OAuth credentials/permissions; the code expects OpenClaw-provided Feishu integration (feishu_drive_file / feishu_im_user_message) rather than raw tokens. This is coherent if you trust the platform to supply Feishu auth, but FEISHU_USER_ID alone is not sufficient to perform uploads outside that environment.

Persistence & Privilege

always is false and the skill does not request persistent system-wide privileges or modify other skills. It executes child processes (yt-dlp/python) within the skill's temp directory—normal for this functionality.

Assessment

This skill appears to do what it says: it runs yt-dlp (network access to YouTube) to produce MP3 files in a temp folder, then relies on the OpenClaw/Feishu tool integrations to upload and send the file. Before installing: (1) ensure you have Python and yt-dlp available; (2) understand yt-dlp will download content from YouTube—respect copyright and company policy; (3) confirm Feishu OAuth/permissions are granted to the platform (FEISHU_USER_ID alone isn’t enough to perform uploads outside OpenClaw); (4) review the included scripts if you want to audit behavior (they spawn child processes and write to a temp directory). If you are comfortable with these, the skill is internally coherent.

YouTube to Feishu Audio Upload

What it does

Downloads audio from YouTube video and uploads to Feishu cloud storage, then sends file link to user's Feishu chat.

Usage Examples

• "Download this YouTube video audio and send to my Feishu: https://www.youtube.com/watch?v=dyJUscv7b9g"
• "Convert YouTube to MP3 and upload to Feishu: <URL>"
• "Save this YouTube audio to Feishu cloud: <URL>"

Workflow

1. Extract video info - Fetch YouTube video title, duration, thumbnail
2. Download audio - Use yt-dlp to extract and convert to MP3
3. Upload to Feishu - Upload file to Feishu cloud drive
4. Send to user - Send interactive card with download link to Feishu chat
5. Cleanup - Remove temporary local files

Tools

youtube_upload — Download and upload YouTube audio

When user sends a YouTube URL:

1. Parse URL - Extract video ID from YouTube URL
2. Download - Use yt-dlp to download audio as MP3
3. Upload - Upload to Feishu cloud drive via feishu_drive_file
4. Send - Send interactive card to user via feishu_im_user_message
5. Report - Return file info and links

Output Format

For each upload, return:

• Video title
• Audio file size
• Duration (if available)
• Feishu cloud file link
• Feishu message card

Dependencies

• yt-dlp - YouTube download tool (pip install yt-dlp)
• Python 3.8+
• Feishu OAuth - User authorization for cloud drive and IM

Configuration

Variable	Description	Default
FEISHU_USER_ID	User's Feishu open_id	Required
TEMP_DIR	Temporary download directory	./temp

Guardrails

• Only download from YouTube (validate URL)
• Respect copyright - warn user about downloaded content usage
• Auto-cleanup temp files after upload
• Max file size: 100MB (Feishu limit)
• Report errors honestly if download/upload fails

Example Flow

User: Download this to Feishu: https://www.youtube.com/watch?v=dyJUscv7b9g

Bot: [1/4] Extracting video info...
Bot: [2/4] Downloading audio (MP3, 17.5MB)...
Bot: [3/4] Uploading to Feishu cloud...
Bot: [4/4] Sending to your Feishu chat...
Bot: ✅ Done! File sent to your Feishu.