Back to skill
Skillv1.0.3
VirusTotal security
YouTube Summary · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:10 AM
- Hash
- 4a951334a56bfef921788e4a17ab8c0b38ed5213f9cefd7b76af9e5d716a2cb8
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: youtube-summary Version: 1.0.3 The skill bundle is classified as benign due to its transparent operation and explicit security hardening measures. It clearly documents its reliance on external dependencies (`youtube2md`) and the data handling implications of using `OPENAI_API_KEY` for full summarization. Crucially, the `scripts/run_youtube2md.sh` script actively prevents common command injection vectors by rejecting the `YOUTUBE2MD_BIN` environment variable override and disallowing runtime `npx` execution, demonstrating a strong intent towards secure execution. All file and network access is directly tied to the stated purpose, and prompt injection surfaces in `SKILL.md` and `references/*.md` are used for secure operational guidance rather than subversion.
- External report
- View on VirusTotal