Universal Video Downloader

Download videos from YouTube, Instagram, TikTok, Twitter/X, and 1000+ other sites using yt-dlp. Supports quality selection and automatic cleanup. Use when a user provides a video link from any platform and wants to download it.

This skill appears to do exactly what it claims, but take these practical precautions before installing: 1) Ensure yt-dlp and ffmpeg are installed from trusted sources (distribution packages or official releases) because the skill runs those binaries. 2) Be aware yt-dlp will fetch remote content (network activity is expected). 3) Confirm you have permission to download the content (copyright and platform terms). 4) Make sure the agent has permission to write and delete files in its working directory; the SKILL.md requires immediate deletion after upload to free disk space. 5) If you do not want the agent to download files without explicit user confirmation, restrict autonomous invocation or require explicit user prompts. Overall the skill is coherent and contains no evident exfiltration or unrelated credential requests.

Type: OpenClaw Skill Name: universal-video-downloader Version: 1.0.2 The skill is designed to download videos using `yt-dlp` and includes appropriate safety measures. The `scripts/download.py` file correctly uses `subprocess.run` with a list of arguments, preventing shell injection from user-controlled URLs or format IDs. It also sanitizes output filenames to prevent path traversal. The `SKILL.md` instructs the agent to delete downloaded files using `rm` for cleanup, which is a legitimate operational requirement. There is no evidence of intentional malicious behavior such as data exfiltration, unauthorized execution, or persistence mechanisms.