← 返回 Skills 市场
xjouska

u2-downloader

作者 Xiaosen Li · GitHub ↗ · v1.0.3
cross-platform ⚠ suspicious
516
总下载
2
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install u2-downloader
功能描述
Download YouTube videos by URL in various resolutions using a pay-per-use API with credit-based authentication and no charge on failed downloads.
安全使用建议
This skill routes downloads through an unvetted third-party (u2foru.site) and asks you to generate and paste a bearer API key — a payment-capable secret — into OpenClaw. Before installing: verify the vendor (look for a reputable homepage or source repo), confirm how OpenClaw stores and scopes the API key (is it stored only for this skill and encrypted?), review the service's billing and privacy terms, and prefer skills with published source code or well-known providers. If you only need downloads, consider running a local tool you control (e.g., yt-dlp) instead of giving a third party an API key. If you proceed, use a dedicated API key with minimal funds and monitor your account for unexpected charges.
功能分析
Type: OpenClaw Skill Name: u2-downloader Version: 1.0.3 The skill is suspicious due to its complete reliance on an external, third-party service (`u2foru.site`) for all functionality. The `SKILL.md` instructs the OpenClaw agent to direct the user to register on this external site, obtain an API key, and then send all YouTube video download requests (including the user's requested URLs) to `u2foru.site`. This design introduces significant privacy risks, as user activity (video URLs) and potentially personal registration data are exfiltrated to an unverified third party, and the security of the service is entirely dependent on this external entity.
能力评估
Purpose & Capability
The described purpose (YouTube downloader via a pay-per-use API) matches the runtime instructions which call https://u2foru.site endpoints. However the registry metadata declares no primary credential or required env vars, while SKILL.md explicitly instructs the user to obtain and provide an API key (format sk-yt-xxxxx). The absence of a declared credential in the package metadata is an inconsistency.
Instruction Scope
SKILL.md is instruction-only and stays within the stated purpose: it tells the agent to send requests to the vendor API and to include a bearer API key. It does not instruct reading local files or other system credentials. However it directs the user to register at an external, unvetted domain (u2foru.site) and to paste the API key into OpenClaw, which is a sensitive user action.
Install Mechanism
There is no install script or code to download — the skill is instruction-only. This keeps disk-write and code-execution risk low. The Quick Install references a URL for installing the skill via OpenClaw but there is no archive or remote code fetch specified in the skill package itself.
Credentials
The skill requires a secret API key to operate, which is reasonable for a paid third‑party API. But the package metadata does not declare this credential (primaryEnv missing), so the required secret is not explicit in the registry. The external service is unknown and pay-per-use — providing a key may enable billing/charges and potential misuse. No other credentials are requested.
Persistence & Privilege
The skill does not request always: true, does not include installs that modify other skills, and is not requesting elevated or persistent system privileges. Autonomous invocation remains allowed (platform default) but does not combine with other high‑privilege flags here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install u2-downloader
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /u2-downloader 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.3
- Simplified and shortened installation and usage instructions. - Removed credit pricing and charging details from documentation. - Updated API reference: balance response now shows only username; health response excludes credit info. - Credit deduction and error details were removed from the example responses and error code table. - Content is now more concise, focusing on essential usage and endpoint information.
v1.0.2
- Updated English installation phrase to: "download this skill:https://clawhub.ai/XJouska/u2-downloader" - No other changes detected.
v1.0.1
- Added a "Quick Install" section with step-by-step instructions for OpenClaw users. - Expanded the "Credits & Pricing" section for clarity on rates and recharge process. - Added "Usage" section with natural language command examples and supported resolutions. - Improved onboarding information for obtaining and using the API Key. - Core API endpoints and technical documentation remain unchanged.
v1.0.0
Initial release of YouTube Video Downloader Skill. - Provides authenticated, pay-per-use YouTube video downloads via API. - Supports customizable video resolution and audio-only downloads. - Credits are used per successful download; failed attempts are not charged. - Includes endpoints to download videos, check credit balance, and check service health. - Credits never expire; minimum recharge S$1 = 5 credits. - Example usage provided in curl and Python.
元数据
Slug u2-downloader
版本 1.0.3
许可证
累计安装 0
当前安装数 0
历史版本数 4
常见问题

u2-downloader 是什么?

Download YouTube videos by URL in various resolutions using a pay-per-use API with credit-based authentication and no charge on failed downloads. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 516 次。

如何安装 u2-downloader?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install u2-downloader」即可一键安装,无需额外配置。

u2-downloader 是免费的吗?

是的,u2-downloader 完全免费(开源免费),可自由下载、安装和使用。

u2-downloader 支持哪些平台?

u2-downloader 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 u2-downloader?

由 Xiaosen Li(@xjouska)开发并维护,当前版本 v1.0.3。

💬 留言讨论