ClawHub

YouTube Notes

v1.0.4

Convert any YouTube video into clean, structured markdown notes — steps, tools, timestamps, and parts lists. Use when a user shares a YouTube link and asks y...

⭐ 0· 73·0 current·0 all-time
by@welbinator
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (convert YouTube to structured notes) match the runtime instructions and the single required credential. Requesting TRANSCRIPT_API_KEY for TranscriptAPI.com is expected for transcript retrieval; fetching the video page HTML to read the description is also coherent with the stated goal.
✓
Instruction Scope
SKILL.md explicitly limits actions to extracting a YouTube video ID, calling TranscriptAPI with an Authorization header, fetching the YouTube page HTML to read the description, parsing transcripts, and producing markdown. It does not instruct reading unrelated files, scanning system state, or exfiltrating extra data beyond the video/transcript/description.
✓
Install Mechanism
No install spec or code files — instruction-only skill. No binaries or external downloads are requested, so there is nothing being written to disk by the skill itself.
✓
Credentials
Only one required environment variable (TRANSCRIPT_API_KEY), declared as the primary credential. This is proportional to the skill's function and is justified by the dependency on TranscriptAPI. No unrelated credentials or config paths are requested.
✓
Persistence & Privilege
always is false and the skill doesn't request elevated or permanent platform privileges. It asks the agent to store the provided API key 'wherever your agent manages credentials' (normal), but it does not modify other skills or system settings.
Assessment
This skill appears coherent and does what it says: it will call TranscriptAPI (requires you to provide TRANSCRIPT_API_KEY) and optionally fetch the YouTube page HTML to read the description. Before installing/providing the key, verify you trust TranscriptAPI.com (their free tier and proxy claims are in the SKILL.md). Keep your API key secure and only provide it to agents you trust; if you do not want the agent to make network calls or use third-party services, do not set TRANSCRIPT_API_KEY. If you plan to have the agent save notes to external services, control or confirm those handoffs separately (the skill explicitly defers saving to other tools).

Like a lobster shell, security has layers — review code before you run it.

latestvk97ec642e9gvjqy16a1xqaz37d843zka

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvTRANSCRIPT_API_KEY
Primary envTRANSCRIPT_API_KEY

Comments