ClawHub - YouTube Downloader & Clipper

Clip and download specific time ranges or full YouTube videos in various qualities, including audio-only MP3 extraction, using precise timestamps.

This skill appears to be what it claims: a yt-dlp-based YouTube clipper. Before installing/using it, be aware that (1) it will generate and execute temporary Python scripts on your machine, (2) it may run pip install to add the yt-dlp module to your Python environment (which can modify system/site packages depending on your Python setup), and (3) audio extraction may require ffmpeg (a separate binary). If you are comfortable allowing a skill to write and run short Python scripts and to install a Python package, this is proportional for the stated purpose. If you prefer to avoid modifying your environment, run it inside a virtualenv/container or inspect the generated script before execution. Also ensure you comply with copyright rules for downloaded content.

Type: OpenClaw Skill Name: youtube-downloader-clipper Version: 1.1.1 The skill is classified as suspicious due to the agent being instructed to execute `pip install yt-dlp` in `prompt.md` if the module is not found. While `yt-dlp` is a legitimate package, granting the agent the capability to run `pip install` allows it to install arbitrary Python packages, which is a high-risk operation. Additionally, the agent is instructed to generate and execute Python code based on user input, which, despite instructions for filename sanitization, presents a significant attack surface if not perfectly secured by the agent's runtime environment.