← 返回 Skills 市场
Youtube Master
作者
TevfikGulep
· GitHub ↗
· v1.0.2
499
总下载
2
收藏
2
当前安装
2
版本数
在 OpenClaw 中安装
/install youtube-master
功能描述
Get YouTube video info, statistics, descriptions, thumbnails, and optionally transcripts. Uses YouTube Data API (free) for basic info and Apify (optional) fo...
安全使用建议
This skill appears to implement the described functionality, but there are important inconsistencies you should resolve before installing:
- The registry claims both YOUTUBE_API_KEY and APIFY_TOKEN are required, but transcripts are optional. Confirm whether APIFY_TOKEN should be optional and update the registry metadata accordingly.
- SKILL.md documents two credential options (env vars OR a credentials file), but the script only reads the credentials file (~/.openclaw/workspace/credentials/api-credentials.json). If you plan to use environment variables, ask the author to fix the code or use the credentials file instead.
- The script calls a specific Apify actor (scrape-creators~best-youtube-transcripts-scraper) when fetching transcripts. If you will supply an APIFY_TOKEN, review the actor's privacy/behavior (on apify.com) and ensure the token has the minimal necessary permissions. Only provide APIFY_TOKEN if you need transcripts.
- Store API keys carefully (use the credentials file or a secrets manager); do not paste them into public places. Consider testing the script in a controlled environment first.
If the author cannot clarify/fix the env vs file behavior, treat the mismatch as a red flag and prefer not to install until corrected.
功能分析
Type: OpenClaw Skill
Name: youtube-master
Version: 1.0.2
The skill bundle is benign. It performs its stated purpose of fetching YouTube video information and optional transcripts using the YouTube Data API and Apify API. Credentials are read from the designated OpenClaw `api-credentials.json` file. All network requests are made to legitimate API endpoints (`www.googleapis.com`, `api.apify.com`) necessary for its functionality. There is no evidence of data exfiltration to unauthorized destinations, malicious command execution, persistence mechanisms, or prompt injection attempts in `SKILL.md`.
能力评估
Purpose & Capability
The functionality (YouTube Data API for metadata; Apify for transcripts) is coherent with the skill name and description. However, the registry lists both YOUTUBE_API_KEY and APIFY_TOKEN as required env vars while SKILL.md describes Apify as "optional" for transcripts — this mismatch is disproportionate to the stated optional nature of transcripts.
Instruction Scope
SKILL.md tells users two credential setup options: environment variables or a credentials file at ~/.openclaw/workspace/credentials/api-credentials.json. The Python script, however, only reads the credentials file (get_credentials() reads that JSON file) and does not read environment variables at all. That divergence between instructions and runtime behavior is a functional security/usability problem: users may supply env vars expecting the skill to use them, but the script will ignore them.
Install Mechanism
This is an instruction-only skill with a small included Python script and no install spec or downloaded artifacts. No installer URLs or archive extraction are involved.
Credentials
Requesting YOUTUBE_API_KEY and APIFY_TOKEN conceptually fits the functionality, but APIFY_TOKEN is effectively optional (used only when transcripts are requested) while the registry metadata lists it as required. Additionally, the SKILL.md suggests env var usage but the script ignores env vars; this mismatch could cause users to expose credentials in the wrong place or believe the skill is more privileged than it is. The script will read credentials from a specific path under the user's home directory, which is consistent with the documentation but should be documented clearly.
Persistence & Privilege
The skill does not request permanent/always presence, does not modify other skills or system-wide settings, and only makes outbound API calls to Google and Apify when invoked (Apify only on explicit transcript request).
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install youtube-master - 安装完成后，直接呼叫该 Skill 的名称或使用
/youtube-master触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Remove hardcoded API keys, read only from credentials file
v1.0.1
Removed username prefix from slug
元数据
常见问题
Youtube Master 是什么？
Get YouTube video info, statistics, descriptions, thumbnails, and optionally transcripts. Uses YouTube Data API (free) for basic info and Apify (optional) fo... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 499 次。
如何安装 Youtube Master？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install youtube-master」即可一键安装，无需额外配置。
Youtube Master 是免费的吗？
是的，Youtube Master 完全免费（开源免费），可自由下载、安装和使用。
Youtube Master 支持哪些平台？
Youtube Master 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Youtube Master？
由 TevfikGulep（@tevfikgulep）开发并维护，当前版本 v1.0.2。
推荐 Skills