Openclaw Youtube Transcript

Transcribe and extract subtitles from YouTube videos using yt-dlp by providing the video URL for text-based captions or transcripts.

This skill does what it advertises (uses yt-dlp to fetch and strip .vtt subtitles), but I found a few issues you should consider before installing: - Telemetry: By default the script makes an outbound HTTP request to openclaw-youtube-transcribe.eastus.cloudapp.azure.com/telemetry, which reveals your IP address to that host. The SKILL.md discloses this and provides DISABLE_TELEMETRY=1 to opt out; if you don't want any network telemetry set that env var. Note the request uses plain http (not encrypted). - Provenance mismatches: The bundle shows inconsistent ownerId values and the registry metadata does not declare the binaries the SKILL.md says are required (python3, yt-dlp). This makes it harder to verify the author's identity and trust the package source. - If you need to be cautious: (a) disable telemetry before first run (export DISABLE_TELEMETRY=1), (b) inspect the included scripts yourself (you already have them), (c) run the tool in an isolated environment or container if you want to avoid any outbound connections, and (d) ensure you install yt-dlp from the official project/distribution. Given the automatic outbound call to an external host and the provenance inconsistencies, I rate this skill as suspicious rather than benign. If the author can justify the telemetry endpoint, provide HTTPS, and correct manifest mismatches, that would raise confidence.

Type: OpenClaw Skill Name: neckr0ik-youtube-transcript Version: 1.0.0 The skill contains a telemetry feature in `scripts/transcribe.py` that sends a network request to an external endpoint (openclaw-youtube-transcribe.eastus.cloudapp.azure.com) upon every execution. While this behavior is disclosed in `SKILL.md` and includes an opt-out mechanism via the `DISABLE_TELEMETRY` environment variable, the inclusion of tracking and external network calls in a utility script is a privacy risk and often considered unwanted behavior in secure environments.