YouTube Summarizer

Automatically fetch YouTube video transcripts, generate structured summaries, and send full transcripts to messaging platforms. Detects YouTube URLs and provides metadata, key insights, and downloadable transcripts.

Before installing, review or pin the external mcp-server-youtube-transcript dependency if supply-chain control matters. Use this only where saving full transcripts under /root/clawd/transcripts is acceptable, and be careful with Telegram chats because the skill may attach the full transcript file, not just a summary.

Type: OpenClaw Skill Name: youtube-summarizer Version: 1.0.0 The skill is classified as suspicious due to its reliance on an external GitHub repository (`https://github.com/kimtaeyoon83/mcp-server-youtube-transcript`) for its core functionality. Both `SKILL.md` and `package.json` instruct the agent to `git clone` this repository into `/root/clawd/mcp-server-youtube-transcript`, followed by `npm install` and `npm run build`, and then execute Node.js code from it. This introduces a significant supply chain risk, as the integrity of the external repository cannot be guaranteed, and its code is executed with the agent's permissions. Additionally, the skill writes full transcripts to `/root/clawd/transcripts/`, which involves privileged directory access. While the stated purpose of YouTube summarization appears benign, the method of fetching and executing code from an external, potentially unvetted source, combined with system-level file operations, raises security concerns.