← Back to Skills Marketplace
TubeScribe
by
matusvojtek
· GitHub ↗
· v1.1.8
5462
Downloads
7
Stars
0
Active Installs
18
Versions
Install in OpenClaw
/install tubescribe
Description
YouTube video summarizer with speaker detection, formatted documents, and audio output. Works out of the box with macOS built-in TTS. Optional recommended tools (pandoc, ffmpeg, mlx-audio) enhance quality. Requires internet for YouTube access. No paid APIs or subscriptions. Use when user sends a YouTube URL or asks to summarize/transcribe a YouTube video.
Usage Guidance
Install only if you are comfortable with YouTube links starting background processing that fetches public YouTube data, writes local files, invokes local tools, and may send transcript/comment text through your agent model environment. Review setup.py before accepting optional downloads, avoid private or sensitive videos, and consider requiring explicit confirmation before processing each URL.
Capability Analysis
Type: OpenClaw Skill
Name: tubescribe
Version: 1.1.8
This skill bundle is classified as benign. While its functionality involves interactions with the file system, network, and execution of external binaries, which inherently carry risks, the code demonstrates robust security practices. Key indicators include comprehensive URL validation, filename sanitization, safe handling of text passed to subprocess commands (using `json.dumps()` to prevent code injection), and explicit XSS protection in the HTML writer (allowlisting safe tags and stripping event handlers). The `CHANGELOG.md` reveals a history of critical vulnerabilities (code injection, XSS, path traversal, race conditions) that were identified and *fixed*, indicating a proactive approach to security rather than malicious intent. The `SKILL.md` also includes strong prompt injection defenses, instructing the sub-agent not to install software or make unauthorized network calls.
Capability Assessment
Purpose & Capability
The transcript, metadata, comments, document export, queueing, and audio generation features fit the stated YouTube summarizer purpose, but the privacy wording overstates purely local processing because transcript/comment content is meant to be read and transformed by the active agent/sub-agent environment.
Instruction Scope
SKILL.md instructs the agent to spawn a sub-agent immediately for a YouTube URL, run the full shell-based pipeline, generate documents/audio, clean up, and open the output folder without a user confirmation checkpoint.
Install Mechanism
The setup script discloses and prompts for optional installs from Homebrew, GitHub releases, and PyPI into user-owned tool directories; this is purpose-aligned, but standalone/latest downloads are not pinned or checksum-verified.
Credentials
The runtime needs shell, network, file read/write, temp files, config under ~/.tubescribe, output under ~/Documents/TubeScribe, and local tool directories, while metadata only declares the summarize binary; the access is mostly coherent but under-declared for user consent.
Persistence & Privilege
Persistence is limited to config, queue state, generated outputs, optional tools, caches, and per-user temp files; no hidden daemon, credential harvesting, privilege escalation, or destructive persistence was found, though the TTS paths execute local user-writable interpreters.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tubescribe - After installation, invoke the skill by name or use
/tubescribe - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.8
- Description updated: works out of the box, optional tools enhance quality, internet required for YouTube
- Added OpenClaw metadata: declares summarize as required binary
- Added security clarifications: no data uploaded, sub-agent has strict no-install instructions
- Expanded setup.py documentation in README
- Fixed display name on ClawHub: TubeScribe (was Tubescribe)
v1.1.7
TubeScribe 1.1.7
- Updated documentation in SKILL.md and README.md for clarity on local vs. network operations.
- Clarified no paid APIs or subscriptions are required, but network is used to fetch YouTube data.
- Improved instructions regarding the handling of source/output paths and first-time setup.
- Minor corrections to workflow steps and documentation formatting for setup and configuration.
v1.1.6
Fixed long code line in SKILL.md causing horizontal scroll on ClawHub page
v1.1.5
MLX-Audio TTS (3-4x faster on Apple Silicon), 12 bug fixes, 4 security fixes, yt-dlp max_comments correct 5-value format, per-user secure temp directory, SKILL.md temp path fix
v1.1.4
Fix: wrapped long line in SKILL.md that caused horizontal scroll on ClawHub page
v1.1.3
## v1.1.3 — Bug Fixes, Security Hardening & Config Improvements
### Bug Fixes
- Fixed URL handling: normalize /live/, /shorts/ and other YouTube URL formats
- Fixed false-positive error detection (only check error patterns when command actually fails)
- Fixed queue file locking: proper lock-before-open semantics with os.open()+os.fdopen()
- Fixed timezone-aware comparison in stale job detection (was crashing on some systems)
- Fixed link double-encoding in HTML output (URLs with & were breaking)
- Fixed built-in TTS (macOS say) for long summaries: uses temp file to avoid CLI arg length limits
- Fixed headers and table cells now render bold/italic/links correctly in HTML output
- Cleanup now removes TTS temp script files too
### Security
- Zip/tar path traversal validation when installing pandoc/yt-dlp (prevents zip-slip attacks)
- Added single-quote escaping in HTML output
- Added safety rule in SKILL.md to prevent sub-agents from installing software
### Improvements
- Kokoro voice blend and speed now read from config (no more hardcoded values)
- Config uses nested key access throughout (audio.format instead of flat keys)
- Renamed config.set() to config.set_value() to avoid shadowing Python builtin
- setup.py delegates to tubescribe.py for find_ytdlp/find_kokoro (DRY, no duplication)
- Uses find_ytdlp() helper with multi-path search instead of raw subprocess calls
- SKILL.md uses relative paths (portable across installations)
- TTS respects tts_engine config setting (kokoro/builtin/disabled)
- Better error message when macOS say command not found
- Removed unreliable live_stream error pattern
- Default Kokoro path updated to ~/.openclaw/tools/kokoro
v1.1.2
Bug fixes: stale queue crash, config corruption, HTML table/XSS fixes, URL validation. Removed python-docx fallback and afconvert dependency. Simplified builtin TTS (say → WAV direct). Added queue file locking, blockquotes. Improved comment formatting (dash + italic).
v1.1.1
Non-blocking async workflow, improved queue processing, viewer sentiment and best comments
v1.1.0
Step timing, bold headings, improved comment formatting
v1.0.8
Fixed RTF→HTML, added Markdown support, updated config docs
v1.0.7
Simplified frontmatter
v1.0.6
Fix publish
v1.0.5
Re-publish: Fixed RTF→HTML, added Markdown support, updated docs
v1.0.4
Fixed RTF references - replaced with HTML. Added Markdown format support. Updated config documentation.
v1.0.3
Fixed display name capitalization (TubeScribe not Tubescribe); restored Markdown in description
v1.0.2
Fixed description: outputs are DOCX or HTML (not Markdown)
v1.0.1
Cleanup: removed unused RTF writer (HTML is the fallback now)
v1.0.0
Initial release: YouTube video summarizer with speaker detection, documents, and audio
Metadata
Frequently Asked Questions
What is TubeScribe?
YouTube video summarizer with speaker detection, formatted documents, and audio output. Works out of the box with macOS built-in TTS. Optional recommended tools (pandoc, ffmpeg, mlx-audio) enhance quality. Requires internet for YouTube access. No paid APIs or subscriptions. Use when user sends a YouTube URL or asks to summarize/transcribe a YouTube video. It is an AI Agent Skill for Claude Code / OpenClaw, with 5462 downloads so far.
How do I install TubeScribe?
Run "/install tubescribe" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is TubeScribe free?
Yes, TubeScribe is completely free (open-source). You can download, install and use it at no cost.
Which platforms does TubeScribe support?
TubeScribe is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created TubeScribe?
It is built and maintained by matusvojtek (@matusvojtek); the current version is v1.1.8.
More Skills