YouTube Summary

Summarize YouTube videos into structured Markdown with youtube2md, including chaptered notes, timestamp links, and key takeaways. Use when the user provides...

This skill appears to do what it says: run a local youtube2md CLI and convert transcript JSON into readable summaries. Before enabling: 1) Install and audit the upstream youtube2md package (they recommend npm i -g [email protected]) and ensure Node.js 18+ is acceptable in your environment. 2) Do NOT set OPENAI_API_KEY if the transcripts are sensitive — that key enables youtube2md to call OpenAI and transmit transcript content. 3) The included scripts (run_youtube2md.sh and prepare.py) are small and readable; they only call the local youtube2md binary and parse transcript JSON. If you want higher assurance, vendor or vet the youtube2md release and dependencies in your environment before use.

Type: OpenClaw Skill Name: youtube-summary Version: 1.0.3 The skill bundle is classified as benign due to its transparent operation and explicit security hardening measures. It clearly documents its reliance on external dependencies (`youtube2md`) and the data handling implications of using `OPENAI_API_KEY` for full summarization. Crucially, the `scripts/run_youtube2md.sh` script actively prevents common command injection vectors by rejecting the `YOUTUBE2MD_BIN` environment variable override and disallowing runtime `npx` execution, demonstrating a strong intent towards secure execution. All file and network access is directly tied to the stated purpose, and prompt injection surfaces in `SKILL.md` and `references/*.md` are used for secure operational guidance rather than subversion.