tl;dw - YouTube Video Summarizer
ReviewAudited by ClawScan on May 10, 2026.
Overview
The skill appears to be a real YouTube transcript summarizer, but it needs review because its optional logged-in-cookie mode is paired with disabled certificate checking.
Install only if you are comfortable running a local Python/yt-dlp script and external pip packages. For normal public videos the behavior is largely purpose-aligned. Be cautious with the cookie feature: use the narrowest YouTube-only cookie export possible, avoid untrusted networks, delete cookies and cache files after use, and consider removing the certificate-check bypass before using authenticated access.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If you use the cookie option, your logged-in YouTube/browser session cookies may be handled less safely on the network.
The script can attach a user-supplied cookie file to yt-dlp while certificate validation is disabled, which weakens protection for authenticated YouTube session material.
'nocheckcertificate': True, # Bypass SSL issues ... if cookies_path and os.path.isfile(cookies_path): ... self.ydl_opts['cookiefile'] = cookies_path
Avoid the cookie option unless necessary. If restricted-video access is needed, use YouTube-only exported cookies, run only on a trusted network, remove the certificate-bypass setting if possible, and delete the cookie file after use.
The installed package versions may change over time and come from external package repositories.
Setup relies on installing third-party Python packages from pip without pinned versions. This is expected for the skill, but it is still a supply-chain surface users should verify.
venv/bin/pip install yt-dlp webvtt-py
Install in an isolated virtual environment, consider pinning known-good versions, and review package provenance before running.
Summaries or transcripts from videos you access may remain on disk after the task finishes.
The skill stores retrieved transcript content locally. This is disclosed and useful for performance, but cached content may include private or members-only transcript data when cookies are used.
Downloaded transcripts are cached locally to avoid re-downloading
Use a dedicated cache directory, clear it after sensitive videos, and avoid caching restricted content if that matters to you.
A video transcript could contain text that looks like instructions to the agent.
YouTube captions are external, untrusted text. Processing them directly in the agent context is normal for summarization, but the agent should treat transcript text as content to summarize rather than instructions to obey.
Analyzes the cleaned transcript directly in the main agent session
When using the skill, keep transcript text isolated as quoted source material and ignore any embedded instructions inside the video content.