Youtube Factory

Generate complete YouTube videos from a single prompt - script, voiceover, stock footage, captions, thumbnail. Self-contained, no external modules. 100% free...

Review this before installing if you will let agents choose command arguments. Use a non-sensitive topic, keep the Pexels key limited to Pexels, run it in an isolated environment, avoid custom --output values unless they are simple directory names, and expect generated files to remain on disk under your account.

Type: OpenClaw Skill Name: youtube-factory Version: 1.3.0 The skill bundle appears benign. The `youtube_factory.py` script performs video generation using `ffmpeg` and `edge-tts`, downloads stock footage from Pexels, and creates temporary files. Crucially, it includes robust security measures such as sanitizing user-controlled inputs for file paths and captions, validating all download URLs against an allowlist of Pexels domains to prevent SSRF, and using `subprocess.run` with argument lists to mitigate shell injection risks. The `SKILL.md` documentation is clear and does not contain any prompt injection attempts or instructions for malicious behavior. While the Python script currently uses a hardcoded script instead of an LLM as described in `SKILL.md`, this is a functional limitation, not a security vulnerability or malicious act.