ClawHub

Youtube Search

v1.4.1

Search YouTube for videos and channels, search within specific channels, then fetch transcripts. Use when the user asks to "find videos about X", "search YouTube for", "look up a channel", "who makes videos about", "find on youtube", or wants to discover YouTube content on a topic.

⭐ 3· 2k·11 current·11 all-time
byRohit Das@therohitdas
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (YouTube search + transcript fetch) match the declared needs: TRANSCRIPT_API_KEY is the service API key, node is required to run the provided auth helper, and ~/.openclaw/openclaw.json is the stated agent config file that will store the API key.
ℹ
Instruction Scope
Runtime instructions call TranscriptAPI endpoints (register, verify, search, transcript) and direct the included CLI script to save the resulting API key to ~/.openclaw/openclaw.json. This is in-scope for obtaining and using a transcript API key, but users should be aware the skill will ask for an email and OTP and will persist the API key to their OpenClaw config file (backing up the original).
✓
Install Mechanism
No install spec is provided (instruction-only). A single bundled Node script (scripts/tapi-auth.js) is included and is human-readable; network calls go to transcriptapi.com. There are no downloads from arbitrary or short URLs and no archives extracted.
✓
Credentials
Only TRANSCRIPT_API_KEY is required and declared as the primary credential. The required config path (~/.openclaw/openclaw.json) is directly used to store that key. No unrelated secrets or extra environment variables are requested.
✓
Persistence & Privilege
always is false and the skill does not request elevated or system-wide changes. The included script writes only to the agent-specific ~/.openclaw/openclaw.json (and creates a .bak). It does not modify other skills or global system configs.
Assessment
This skill appears to do what it says: it uses TranscriptAPI to search YouTube and fetch transcripts. Before installing: (1) confirm you trust transcriptapi.com (the CLI will make network calls to their auth endpoints), (2) be aware the auth helper asks for your email and OTP and will save the resulting API key in plaintext to ~/.openclaw/openclaw.json (the script backs up the file to .bak), (3) treat TRANSCRIPT_API_KEY as a secret — anyone with it can use your TranscriptAPI credits, so consider creating a scoped/limited API key on the TranscriptAPI dashboard if available, and (4) review the included scripts (scripts/tapi-auth.js) yourself — it's human-readable and currently only touches the OpenClaw config. If the skill later requested unrelated credentials, wrote to other config paths, or contacted unknown domains, re-evaluate. I have high confidence in this assessment given the provided files and instructions.

Like a lobster shell, security has layers — review code before you run it.

latestvk976aky3wb8d34qbkem1nbxa9n80zgby

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍 Clawdis
Binsnode
EnvTRANSCRIPT_API_KEY
Config~/.openclaw/openclaw.json
Primary envTRANSCRIPT_API_KEY

Comments