← Back to Skills Marketplace
TubeScribe
by
matusvojtek
· GitHub ↗
· v1.1.8
5207
Downloads
7
Stars
8
Active Installs
18
Versions
Install in OpenClaw
/install tubescribe
Description
YouTube video summarizer with speaker detection, formatted documents, and audio output. Works out of the box with macOS built-in TTS. Optional recommended tools (pandoc, ffmpeg, mlx-audio) enhance quality. Requires internet for YouTube access. No paid APIs or subscriptions. Use when user sends a YouTube URL or asks to summarize/transcribe a YouTube video.
Usage Guidance
Install only if you are comfortable with a YouTube URL triggering background processing that fetches captions/comments, writes files locally, generates audio, and may expose transcript/comment text to your active agent or model environment. Review setup.py before accepting optional downloads, avoid private or sensitive videos, and consider changing the workflow to require confirmation before processing a URL.
Capability Analysis
Type: OpenClaw Skill
Name: tubescribe
Version: 1.1.8
This skill bundle is classified as benign. While its functionality involves interactions with the file system, network, and execution of external binaries, which inherently carry risks, the code demonstrates robust security practices. Key indicators include comprehensive URL validation, filename sanitization, safe handling of text passed to subprocess commands (using `json.dumps()` to prevent code injection), and explicit XSS protection in the HTML writer (allowlisting safe tags and stripping event handlers). The `CHANGELOG.md` reveals a history of critical vulnerabilities (code injection, XSS, path traversal, race conditions) that were identified and *fixed*, indicating a proactive approach to security rather than malicious intent. The `SKILL.md` also includes strong prompt injection defenses, instructing the sub-agent not to install software or make unauthorized network calls.
Capability Assessment
Purpose & Capability
The YouTube fetching, comment extraction, document export, and audio generation are coherent with the stated summarizer purpose, but the artifacts also claim processing stays on the user's machine while the workflow has a sub-agent read transcript/comment data to create summaries.
Instruction Scope
SKILL.md tells the agent to spawn a sub-agent immediately when a YouTube URL is sent and run network access, file writes, audio generation, cleanup, and folder opening without an explicit confirmation checkpoint.
Install Mechanism
Setup prompts before optional Homebrew, PyPI, and GitHub-release installs into user-owned tool directories, and the README discloses those downloads; however the runtime no-install wording and model/tool download behavior could be clearer.
Credentials
Network access to YouTube, local output files, temp transcript/comment JSON, and optional TTS/model tooling fit the feature; I found no credential, cookie, login-profile, or unrelated local-data harvesting behavior.
Persistence & Privilege
The skill persists config and queue files under ~/.tubescribe, output under ~/Documents/TubeScribe, optional tools under ~/.openclaw/tools, and temporary source files with cleanup support; there is no evidence of elevated privileges, hidden daemon persistence, or destructive persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tubescribe - After installation, invoke the skill by name or use
/tubescribe - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.8
- Description updated: works out of the box, optional tools enhance quality, internet required for YouTube
- Added OpenClaw metadata: declares summarize as required binary
- Added security clarifications: no data uploaded, sub-agent has strict no-install instructions
- Expanded setup.py documentation in README
- Fixed display name on ClawHub: TubeScribe (was Tubescribe)
v1.1.7
TubeScribe 1.1.7
- Updated documentation in SKILL.md and README.md for clarity on local vs. network operations.
- Clarified no paid APIs or subscriptions are required, but network is used to fetch YouTube data.
- Improved instructions regarding the handling of source/output paths and first-time setup.
- Minor corrections to workflow steps and documentation formatting for setup and configuration.
v1.1.6
Fixed long code line in SKILL.md causing horizontal scroll on ClawHub page
v1.1.5
MLX-Audio TTS (3-4x faster on Apple Silicon), 12 bug fixes, 4 security fixes, yt-dlp max_comments correct 5-value format, per-user secure temp directory, SKILL.md temp path fix
v1.1.4
Fix: wrapped long line in SKILL.md that caused horizontal scroll on ClawHub page
v1.1.3
## v1.1.3 — Bug Fixes, Security Hardening & Config Improvements
### Bug Fixes
- Fixed URL handling: normalize /live/, /shorts/ and other YouTube URL formats
- Fixed false-positive error detection (only check error patterns when command actually fails)
- Fixed queue file locking: proper lock-before-open semantics with os.open()+os.fdopen()
- Fixed timezone-aware comparison in stale job detection (was crashing on some systems)
- Fixed link double-encoding in HTML output (URLs with & were breaking)
- Fixed built-in TTS (macOS say) for long summaries: uses temp file to avoid CLI arg length limits
- Fixed headers and table cells now render bold/italic/links correctly in HTML output
- Cleanup now removes TTS temp script files too
### Security
- Zip/tar path traversal validation when installing pandoc/yt-dlp (prevents zip-slip attacks)
- Added single-quote escaping in HTML output
- Added safety rule in SKILL.md to prevent sub-agents from installing software
### Improvements
- Kokoro voice blend and speed now read from config (no more hardcoded values)
- Config uses nested key access throughout (audio.format instead of flat keys)
- Renamed config.set() to config.set_value() to avoid shadowing Python builtin
- setup.py delegates to tubescribe.py for find_ytdlp/find_kokoro (DRY, no duplication)
- Uses find_ytdlp() helper with multi-path search instead of raw subprocess calls
- SKILL.md uses relative paths (portable across installations)
- TTS respects tts_engine config setting (kokoro/builtin/disabled)
- Better error message when macOS say command not found
- Removed unreliable live_stream error pattern
- Default Kokoro path updated to ~/.openclaw/tools/kokoro
v1.1.2
Bug fixes: stale queue crash, config corruption, HTML table/XSS fixes, URL validation. Removed python-docx fallback and afconvert dependency. Simplified builtin TTS (say → WAV direct). Added queue file locking, blockquotes. Improved comment formatting (dash + italic).
v1.1.1
Non-blocking async workflow, improved queue processing, viewer sentiment and best comments
v1.1.0
Step timing, bold headings, improved comment formatting
v1.0.8
Fixed RTF→HTML, added Markdown support, updated config docs
v1.0.7
Simplified frontmatter
v1.0.6
Fix publish
v1.0.5
Re-publish: Fixed RTF→HTML, added Markdown support, updated docs
v1.0.4
Fixed RTF references - replaced with HTML. Added Markdown format support. Updated config documentation.
v1.0.3
Fixed display name capitalization (TubeScribe not Tubescribe); restored Markdown in description
v1.0.2
Fixed description: outputs are DOCX or HTML (not Markdown)
v1.0.1
Cleanup: removed unused RTF writer (HTML is the fallback now)
v1.0.0
Initial release: YouTube video summarizer with speaker detection, documents, and audio
Metadata
Frequently Asked Questions
What is TubeScribe?
YouTube video summarizer with speaker detection, formatted documents, and audio output. Works out of the box with macOS built-in TTS. Optional recommended tools (pandoc, ffmpeg, mlx-audio) enhance quality. Requires internet for YouTube access. No paid APIs or subscriptions. Use when user sends a YouTube URL or asks to summarize/transcribe a YouTube video. It is an AI Agent Skill for Claude Code / OpenClaw, with 5207 downloads so far.
How do I install TubeScribe?
Run "/install tubescribe" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TubeScribe free?
Yes, TubeScribe is completely free (open-source). You can download, install and use it at no cost.
Which platforms does TubeScribe support?
TubeScribe is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TubeScribe?
It is built and maintained by matusvojtek (@matusvojtek); the current version is v1.1.8.
More Skills