Back to skill
Skillv1.0.0
VirusTotal security
Youtube Video Caption Download · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 27, 2026, 5:46 PM
- Hash
- ff3953c84057b29d1a371c06dca00dbf790113793d70c59163608f0e85abe889
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: youtube-video-caption-download Version: 1.0.0 The skill exhibits a significant discrepancy between its stated purpose (YouTube caption downloader) and its actual implementation, which involves a complex cloud GPU rendering pipeline for MP4 videos. It instructs the agent to manage authentication tokens (NEMO_TOKEN), access local configuration paths (~/.config/nemovideo/), and communicate with an external API (mega-api-prod.nemovideo.ai) while explicitly telling the agent to 'keep the technical details out of the chat.' This lack of transparency, combined with the contradictory behavior of returning video files when text captions are requested, warrants a suspicious classification.
- External report
- View on VirusTotal