youtube copy of yt

Fetch YouTube video transcripts via APIFY API using residential proxies to bypass bot detection, supporting text and JSON output formats.

This skill appears to do what it says (use APIFY to fetch YouTube transcripts), but the published metadata omits the APIFY_API_TOKEN requirement that the docs and script clearly need. Before installing or using it: (1) confirm you trust the publisher — the listed name/description are inconsistent; (2) do not commit your APIFY_API_TOKEN to source control and consider using a least-privilege token if APIFY supports it; (3) verify you accept outbound network calls to api.apify.com (the script posts to and polls APIFY actor runs) and the associated costs (~$0.007 per video); (4) run the script in an isolated environment (virtualenv, container) and inspect the code yourself — the included script is short and readable; (5) ask the publisher to update registry metadata to declare the required env var (APIFY_API_TOKEN) and provide a clear description. The mismatch in declared requirements is the primary reason to be cautious; the code itself contains no obvious exfiltration beyond contacting apify.com for expected data.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The skill bundle is designed to fetch YouTube transcripts using the APIFY API. The `SKILL.md` and `README.md` provide clear, legitimate instructions for setup and usage, including setting an `APIFY_API_TOKEN` environment variable. The `scripts/fetch_transcript.py` script correctly utilizes this token to make API calls exclusively to `api.apify.com` for its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. All network and file operations are directly aligned with the skill's functionality.