video-download

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill largely matches its video-download purpose, but its authenticated-download options can use browser/session cookies without tight scoping.

Install only if you are comfortable with yt-dlp, Faster Whisper, ffmpeg, and their downloads. Be especially careful with cookie-based authentication: use a temporary, site-specific cookie export when possible, and do not grant whole-browser cookie access unless you understand the account/session risk.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used carelessly, the agent may use login cookies for video sites. A raw Cookie header may also be applied broadly during downloads, which could expose session material to unintended requested sites or dependencies.

Why it was flagged

The code can pass a raw Cookie header, browser cookie source, or cookie file into yt-dlp, enabling authenticated requests using local session material.

Skill content
if cookie: base_opts["http_headers"] = {"Cookie": cookie} ... if cookiesfrombrowser: base_opts["cookiesfrombrowser"] = (cookiesfrombrowser,) ... if cookiefile: base_opts["cookiefile"] = cookiefile
Recommendation

Use authenticated options only when necessary. Prefer a temporary, site-specific cookie file over whole-browser cookie access, and confirm the URL list and account scope before running.

What this means

Installing or running the skill may fetch external packages and large AI model files, which can affect security, reproducibility, bandwidth, and disk usage.

Why it was flagged

The skill depends on unpinned third-party Python packages and a model download. This is expected for video downloading and transcription, but it expands the trusted supply chain.

Skill content
pip install yt-dlp yt-dlp-ejs ffmpeg-python faster-whisper tqdm ... The first run will download models from HuggingFace
Recommendation

Install in a virtual environment, review package sources, consider pinning versions, and ensure you trust the model download location.

What this means

The skill can create folders and save large video, audio, and subtitle files in the chosen output directory.

Why it was flagged

The skill performs network downloads and local file writes as its core function. This is purpose-aligned, but users should notice the disk and file-system impact.

Skill content
The skill will: 1. Create a folder for each video ... 2. Download the video file ... 3. Extract audio as WAV file ... 5. Save subtitle as .txt file
Recommendation

Use a deliberate output path, avoid protected or shared directories unless intended, and monitor disk space for large or multiple downloads.