← 返回 Skills 市场
116
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install youtube-data-cli
功能描述
Full YouTube Data API v3 CLI covering all 20 resources: search, channels, videos (upload/update/delete/rate), playlists, playlist items, comments, subscripti...
安全使用建议
This skill's instructions legitimately require OAuth credentials and a credentials file, but the skill metadata does not declare those requirements or a source/homepage. Before installing or using it: (1) ask the publisher for the package source (npm package name, GitHub repo) and verify the code; (2) avoid placing long-lived refresh tokens in broadly writable locations — prefer short-lived or limited-scope credentials; (3) if you only need read-only operations, use an API key or restrict OAuth scopes (do not grant full https://www.googleapis.com/auth/youtube unless necessary); (4) inspect ~/.config/youtube-data-cli/credentials.json and any npm package contents for unexpected behavior; (5) rotate credentials after testing and consider running the CLI in an isolated environment. The mismatch between declared metadata and the runtime instructions is the main red flag — treat this skill as untrusted until you can verify its source and the npm package contents.
功能分析
Type: OpenClaw Skill
Name: youtube-data-cli
Version: 1.0.0
The skill is a legitimate integration for the 'youtube-data-cli' tool (a known open-source project by Bin Huang) to interact with the YouTube Data API v3. The SKILL.md provides standard instructions for installation via npm and detailed usage for managing YouTube resources like videos, playlists, and comments. Credential handling (API keys and OAuth tokens) follows standard practices for CLI tools, and no evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力标签
能力评估
Purpose & Capability
The skill claims to implement the full YouTube Data API (including write/delete/upload operations), which legitimately requires API keys and OAuth client credentials/refresh tokens. However, the registry metadata lists no required env vars, no primary credential, and no required config paths. That omission is inconsistent with the described capabilities (uploads/deletes require OAuth refresh tokens and client secrets).
Instruction Scope
SKILL.md explicitly instructs the agent/user to resolve credentials from env vars (YOUTUBE_API_KEY, YOUTUBE_CLIENT_ID, YOUTUBE_CLIENT_SECRET, YOUTUBE_REFRESH_TOKEN) and from ~/.config/youtube-data-cli/credentials.json. Those paths and env vars are not declared in the skill metadata. The instructions otherwise focus on running the CLI and do not ask to read unrelated system files, but the implicit access to a home credentials file is material and should have been declared.
Install Mechanism
There is no install spec in the skill bundle, but SKILL.md recommends installing via `npm install -g youtube-data-cli`. Installing from the public npm registry is a common pattern, but the skill metadata not declaring an install method or a verified homepage/source means users cannot easily verify the package's provenance from the skill record — you should inspect the npm package/source before installing.
Credentials
SKILL.md expects sensitive credentials (OAuth client ID/secret and refresh token) and a credentials file in the user's home directory, yet the skill declares no required env vars or config paths. Requesting a refresh token with the recommended full YouTube scope grants broad privileges (upload/delete/manage) and is disproportionate to a metadata-free skill record; users must be warned and limit scopes or use read-only API keys where possible.
Persistence & Privilege
The skill does not request always:true, does not ask to modify other skills or system-wide settings, and does not declare autonomous-disable. Autonomous invocation is allowed (platform default) but is not combined here with 'always' or declared persistent privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install youtube-data-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/youtube-data-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of youtube-data-cli – a full-featured CLI for the YouTube Data API v3.
- Covers all 20 API resources with 52 CLI commands, including search, channel, video, playlist, comment, subscription, caption, thumbnail, activities, and more management.
- Supports both API key (for public data) and OAuth 2.0 (for all commands, private data, uploads, and writes); credentials can be provided by flag, env vars, or config.
- Pretty-printed JSON output by default, with error reporting in JSON and global output/credentials configuration.
- Includes detailed help, usage examples, and command reference for all supported operations.
- Enables automation of YouTube management workflows directly from the CLI.
元数据
常见问题
Youtube Data CLI 是什么？
Full YouTube Data API v3 CLI covering all 20 resources: search, channels, videos (upload/update/delete/rate), playlists, playlist items, comments, subscripti... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 116 次。
如何安装 Youtube Data CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install youtube-data-cli」即可一键安装，无需额外配置。
Youtube Data CLI 是免费的吗？
是的，Youtube Data CLI 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Youtube Data CLI 支持哪些平台？
Youtube Data CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Youtube Data CLI？
由 Bin-Huang（@bin-huang）开发并维护，当前版本 v1.0.0。
推荐 Skills