YouTube Analysis

Analyze YouTube videos with summary and deep-dive analysis. Use when a user provides a YouTube URL and wants both a summary and analytical insights about the...

This skill appears coherent and low-risk, but consider the following before installing: - Dependency: it expects an external 'summarize' tool (and possibly yt-dlp) to be present; confirm these tools come from trusted sources on your system. - Network access: transcript extraction requires fetching from YouTube (network I/O). Ensure your environment policy permits this and you're OK with outbound requests to YouTube. - Data exposure: extracted transcripts (which can include personal or sensitive information) will be passed to the main chat model for analysis; if your model is remote or provided by a third party, transcripts are transmitted off-host. Avoid sending private or confidential video content unless you trust the model endpoint and compliance policies. - Source attribution: the skill's source/homepage is unspecified; README points to a GitHub repo. If you plan to install the skill from that repo, review the repository contents and confirm its authenticity. If those considerations are acceptable, the skill's behavior matches its stated purpose. If you need stricter controls, require a vetted 'summarize' binary, restrict network access, or avoid analyzing videos containing sensitive content.

Type: OpenClaw Skill Name: youtube-analysis-skill Version: 1.0.0 The skill utilizes shell execution via the `exec` command to run an external `summarize` tool, which is a risky capability even though it is plausibly needed for the stated purpose of transcript extraction. While the workflow in SKILL.md and README.md appears aligned with analyzing YouTube videos, the use of shell commands with user-provided URLs introduces a potential surface for command injection if not properly sanitized by the agent. No evidence of intentional malice or data exfiltration was found.