← Back to Skills Marketplace
u2-downloader
by
Xiaosen Li
· GitHub ↗
· v1.0.3
516
Downloads
2
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install u2-downloader
Description
Download YouTube videos by URL in various resolutions using a pay-per-use API with credit-based authentication and no charge on failed downloads.
Usage Guidance
This skill routes downloads through an unvetted third-party (u2foru.site) and asks you to generate and paste a bearer API key — a payment-capable secret — into OpenClaw. Before installing: verify the vendor (look for a reputable homepage or source repo), confirm how OpenClaw stores and scopes the API key (is it stored only for this skill and encrypted?), review the service's billing and privacy terms, and prefer skills with published source code or well-known providers. If you only need downloads, consider running a local tool you control (e.g., yt-dlp) instead of giving a third party an API key. If you proceed, use a dedicated API key with minimal funds and monitor your account for unexpected charges.
Capability Analysis
Type: OpenClaw Skill
Name: u2-downloader
Version: 1.0.3
The skill is suspicious due to its complete reliance on an external, third-party service (`u2foru.site`) for all functionality. The `SKILL.md` instructs the OpenClaw agent to direct the user to register on this external site, obtain an API key, and then send all YouTube video download requests (including the user's requested URLs) to `u2foru.site`. This design introduces significant privacy risks, as user activity (video URLs) and potentially personal registration data are exfiltrated to an unverified third party, and the security of the service is entirely dependent on this external entity.
Capability Assessment
Purpose & Capability
The described purpose (YouTube downloader via a pay-per-use API) matches the runtime instructions which call https://u2foru.site endpoints. However the registry metadata declares no primary credential or required env vars, while SKILL.md explicitly instructs the user to obtain and provide an API key (format sk-yt-xxxxx). The absence of a declared credential in the package metadata is an inconsistency.
Instruction Scope
SKILL.md is instruction-only and stays within the stated purpose: it tells the agent to send requests to the vendor API and to include a bearer API key. It does not instruct reading local files or other system credentials. However it directs the user to register at an external, unvetted domain (u2foru.site) and to paste the API key into OpenClaw, which is a sensitive user action.
Install Mechanism
There is no install script or code to download — the skill is instruction-only. This keeps disk-write and code-execution risk low. The Quick Install references a URL for installing the skill via OpenClaw but there is no archive or remote code fetch specified in the skill package itself.
Credentials
The skill requires a secret API key to operate, which is reasonable for a paid third‑party API. But the package metadata does not declare this credential (primaryEnv missing), so the required secret is not explicit in the registry. The external service is unknown and pay-per-use — providing a key may enable billing/charges and potential misuse. No other credentials are requested.
Persistence & Privilege
The skill does not request always: true, does not include installs that modify other skills, and is not requesting elevated or persistent system privileges. Autonomous invocation remains allowed (platform default) but does not combine with other high‑privilege flags here.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install u2-downloader - After installation, invoke the skill by name or use
/u2-downloader - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Simplified and shortened installation and usage instructions.
- Removed credit pricing and charging details from documentation.
- Updated API reference: balance response now shows only username; health response excludes credit info.
- Credit deduction and error details were removed from the example responses and error code table.
- Content is now more concise, focusing on essential usage and endpoint information.
v1.0.2
- Updated English installation phrase to: "download this skill：https://clawhub.ai/XJouska/u2-downloader"
- No other changes detected.
v1.0.1
- Added a "Quick Install" section with step-by-step instructions for OpenClaw users.
- Expanded the "Credits & Pricing" section for clarity on rates and recharge process.
- Added "Usage" section with natural language command examples and supported resolutions.
- Improved onboarding information for obtaining and using the API Key.
- Core API endpoints and technical documentation remain unchanged.
v1.0.0
Initial release of YouTube Video Downloader Skill.
- Provides authenticated, pay-per-use YouTube video downloads via API.
- Supports customizable video resolution and audio-only downloads.
- Credits are used per successful download; failed attempts are not charged.
- Includes endpoints to download videos, check credit balance, and check service health.
- Credits never expire; minimum recharge S$1 = 5 credits.
- Example usage provided in curl and Python.
Metadata
Frequently Asked Questions
What is u2-downloader?
Download YouTube videos by URL in various resolutions using a pay-per-use API with credit-based authentication and no charge on failed downloads. It is an AI Agent Skill for Claude Code / OpenClaw, with 516 downloads so far.
How do I install u2-downloader?
Run "/install u2-downloader" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is u2-downloader free?
Yes, u2-downloader is completely free (open-source). You can download, install and use it at no cost.
Which platforms does u2-downloader support?
u2-downloader is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created u2-downloader?
It is built and maintained by Xiaosen Li (@xjouska); the current version is v1.0.3.
More Skills