← 返回 Skills 市场
ryandeathridge

video2podcast

作者 Ryan · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
119
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install video2podcast
功能描述
Convert bookmarked videos from YouTube, X (Twitter), and other sites into a podcast RSS feed hosted on Cloudflare R2. Use when the user says things like "add...
安全使用建议
What to check before installing: 1) Metadata mismatch: the registry summary omitted required env vars and pip deps — trust the SKILL.md/script, not the truncated registry line. Expect to provide Cloudflare R2 credentials (access key + secret) and the R2 endpoint/bucket/public URL. 2) Limit credentials: create an R2 API key restricted to only Object Read/Write for the specific bucket, not account-wide admin, and rotate it if possible. 3) Test with a disposable bucket/account first (to avoid exposing real data). 4) Cookie access: if you do NOT want the skill to read local browser cookies, set VIDPOD_COOKIE_BROWSER=none; otherwise understand yt-dlp may read local browser cookie stores to access age-restricted content. 5) Installation: run pip installs in a virtualenv and verify ffmpeg is installed from an official source; the install sources here are standard (brew, pip). 6) Inspect and run the included script in a sandbox before granting credentials — the code writes state to ~/.openclaw and uploads files to the configured public bucket. 7) Legal/privacy: ensure you have the right to redistribute audio from videos you convert and that making the bucket public matches your privacy needs. If you want this skill but are unsure about the metadata mismatch, ask the publisher to correct the registry manifest to declare the required env vars and pip installs.
功能分析
Type: OpenClaw Skill Name: video2podcast Version: 1.0.2 The video2podcast skill is a legitimate utility for converting video URLs from platforms like YouTube and X into a podcast RSS feed hosted on Cloudflare R2. It utilizes standard tools such as yt-dlp and boto3, and while it includes a feature to read browser cookies for accessing restricted content, this is a standard yt-dlp capability used here for its intended purpose without evidence of data exfiltration or malicious intent.
能力评估
Purpose & Capability
The name/description match the included code: yt-dlp + ffmpeg to extract audio and boto3 to upload to Cloudflare R2 and publish an RSS feed. However, the registry-level 'Requirements' block lists no required environment variables and only a brew ffmpeg install, while the SKILL.md and script require multiple R2 credentials and pip packages (yt-dlp, boto3). That mismatch is an incoherence in the package metadata (likely packaging/registry error) and should be clarified.
Instruction Scope
The SKILL.md and the script stay within the stated purpose: downloading audio, converting, writing state (~/.openclaw/video-podcast-state.json), and uploading feed and files to R2. The script reads ~/.openclaw/.env for credentials and may use yt-dlp's cookiesfrombrowser feature (reads local browser cookies if enabled). No unrelated system paths, hidden remote endpoints, or broad exfiltration are present in the provided code, but the cookie reading and local state writes are noteworthy and documented in the instructions.
Install Mechanism
Install steps use standard package sources: brew for ffmpeg and pip for yt-dlp and boto3, which are expected for this functionality. The registry manifest (Requirements) lists only brew/ffmpeg while SKILL.md's metadata and instructions also require pip packages — this mismatch in declared install spec vs. runtime requirements is an installation/packaging inconsistency that could lead to runtime failures if ignored.
Credentials
The environment variables the script requires (VIDPOD_R2_ACCESS_KEY, VIDPOD_R2_SECRET, VIDPOD_R2_ENDPOINT, VIDPOD_R2_BUCKET, VIDPOD_PUBLIC_BASE) are appropriate and necessary for uploading to Cloudflare R2. They are sensitive credentials and the SKILL.md marks them as such. Two concerns: (1) the registry metadata shown at the top of the evaluation incorrectly lists 'Required env vars: none' which contradicts the script — that discrepancy should be resolved before trusting the package listing; (2) optional cookie access (VIDPOD_COOKIE_BROWSER) lets yt-dlp read local browser cookies — if you enable that, be aware it reads local cookie stores (yt-dlp handles this) and could expose session cookies to source sites (not to R2).
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or system-wide agent settings. It persists its own state and expects the user to store credentials in ~/.openclaw/.env — this is consistent with a user-installed utility. No excessive platform privileges are requested.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install video2podcast
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /video2podcast 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
Declare VIDPOD_COOKIE_BROWSER env var; make browser cookie use opt-in and documented; clarify cookies are read locally only
v1.0.1
Declare env vars (VIDPOD_*) and binary dependencies (ffmpeg, yt-dlp, boto3) in skill metadata to resolve security scan mismatch
v1.0.0
Initial release — convert YouTube, X (Twitter), and any yt-dlp source into a podcast RSS feed hosted on Cloudflare R2
元数据
Slug video2podcast
版本 1.0.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 3
常见问题

video2podcast 是什么?

Convert bookmarked videos from YouTube, X (Twitter), and other sites into a podcast RSS feed hosted on Cloudflare R2. Use when the user says things like "add... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 119 次。

如何安装 video2podcast?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install video2podcast」即可一键安装,无需额外配置。

video2podcast 是免费的吗?

是的,video2podcast 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

video2podcast 支持哪些平台?

video2podcast 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 video2podcast?

由 Ryan(@ryandeathridge)开发并维护,当前版本 v1.0.2。

💬 留言讨论