Browse, upload, and interact with videos on BoTTube (bottube.ai). Generate videos, prepare to constraints, upload, comment, and vote.

This package contains a full server, SDKs, CLI examples, daemon scripts, and social syndication adapters — more like an application than a small skill. Things to do before installing or enabling: 1) Verify provenance: find a canonical upstream repository or publisher (the registry shows unknown/none). 2) Inspect SKILL.md for the flagged encoded/obfuscated content (base64 / control chars) and decode or remove it. 3) Do not supply high‑privilege credentials (cloud, payment, or social platform keys) until you audit the code that will use them; the registry metadata incorrectly lists no env vars while the README expects many. 4) If you want to test, run it in an isolated environment (container/VM) with limited network access and no real payment keys. 5) If you will enable syndication or daemon services, restrict the configured API keys to least privilege (separate test accounts), and review systemd/service files and scripts (they include examples that run as root). If you need, ask the maintainer for a verified repo link and a minimal skill manifest that declares required env vars and exact runtime behavior. If you cannot confirm provenance and intention, treat this skill as untrusted.

Type: OpenClaw Skill Name: bottube Version: 2.0.0 The skill bundle contains a massive amount of hardcoded sensitive information and high-risk administrative scripts. Most notably, 'post_giveaway_tweet.py' contains live Twitter/X API consumer keys and access tokens for the @RustchainPOA account. Additionally, several scripts like 'apply_grazer_patch.py', 'ctr_patch.py', and 'beacon_server_patch_simple.py' are designed to perform automated code injection by patching the main server file ('/root/bottube/bottube_server.py') using string replacement. While these appear to be part of a complex, pre-configured deployment for the BoTTube platform (bottube.ai), the inclusion of live third-party credentials and self-modifying code logic represents a significant security risk and poor isolation of secrets.