在线视频转文字稿
v1.0.1Extract transcripts/subtitles from video URLs and deliver as .docx files. Use this skill whenever the user provides a video link (YouTube, Bilibili, or any y...
⭐ 0· 233·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (video → transcript → .docx) matches the included scripts (SRT parsing and DOCX generation) and the declared runtime dependencies (yt-dlp, node, npm docx). There are no credentials, platform-specific APIs, or unrelated tools requested.
Instruction Scope
SKILL.md stays within scope: it runs yt-dlp to fetch .srt files, parses them locally, optionally translates via the agent/model, and generates .docx with included Node scripts. One minor behavioral note: the doc references Whisper as an alternative if no subtitles exist but does not include Whisper installation or automation — this is a functional omission, not a security issue.
Install Mechanism
This is an instruction-only skill with small included Node scripts; there is no download-from-arbitrary-URL step. It asks the user/agent to install yt-dlp and node/docx via standard package managers (pip/npm/winget). Minor inconsistency: make_docx.js header suggests a global `npm install -g docx` while package.json declares a local dependency — benign but slightly inconsistent.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. The runtime instructions operate on temporary files and local node/npm packages only, which is proportional to the task.
Persistence & Privilege
always is false and the skill does not request persistent agent-wide privileges or modify other skills. It runs only when invoked and does not demand elevated system presence.
Assessment
This skill appears to be what it claims: it will run yt-dlp (to download subtitles) and Node scripts (to parse SRT and create .docx) on your machine. Before installing/using it: (1) ensure yt-dlp and Node/npm are installed from trusted sources; (2) review and be comfortable with running npm install in the skill's scripts directory (package.json includes the docx dependency); (3) be aware subtitles are downloaded to a temporary directory—check or delete that directory if you have privacy concerns; (4) if no subtitles exist the skill suggests using Whisper, but Whisper is not installed or automated here; and (5) the translation step uses the agent/model (transcripts may be sent to the model for translation), so consider whether you want that content sent to external model endpoints. No credentials are requested by this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97ahf2jwdj3z9k6z5sm7b608d82p2bf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.