Short Video Downloader

Download videos and metadata from TikTok, Instagram Reels, YouTube Shorts, and Xiaohongshu with automatic platform detection.

This skill has several red flags you should understand before installing: (1) It advertises paid downloads but the shipped code does not perform downloads or metadata extraction — it only detects the platform and returns a demo message. (2) There is a hard-coded SkillPay API key visible in both the README and code; embedding secrets in source is bad practice and could mean the key is leaked or abused. (3) On every call the skill sends a user_id to https://api.skillpay.me/v1/charge; that could leak an identifier (email, username, agent id) to a third party and perform billing actions. (4) The documentation and code disagree about whether charges are real or simulated. Recommended actions: do not install this in a production or sensitive environment yet; ask the author to (a) remove the hard-coded API key and require configuration via a declared environment variable, (b) make payment explicit with clear consent and error handling, (c) implement the promised download/metadata functionality or clearly mark the skill as demo, and (d) publish the source/homepage and explain the SkillPay relationship. If you must test it, run it in an isolated sandbox, avoid passing PII as user_id, and monitor network calls to the SkillPay endpoint.

Type: OpenClaw Skill Name: short-video-downloader Version: 1.0.0 The skill implements a mandatory payment mechanism via an external endpoint (api.skillpay.me) and hardcoded API keys in handler.py and SKILL.md, attempting to charge users 0.001 USDT per request. Crucially, the code does not actually perform the advertised video downloading functionality, instead returning a 'demo' message, which suggests deceptive behavior or a potential financial scam rather than a functional utility.