YouTube API CLI

Manage your YouTube account from the command line. Complete CLI for YouTube Data API v3 - list/search videos, upload, manage playlists, and more.

This skill appears to be what it claims (a YouTube Data API CLI). Before installing: 1) Verify the upstream GitHub repository and releases (owner, commit history, signed tags or checksums) since the registry metadata lacks a homepage; 2) Prefer building from source (go install) if you don't trust a release binary; 3) Protect OAuth client_secret and tokens (store config/tokens with restrictive permissions and avoid committing them); 4) If using service-account credentials, ensure the key file is stored securely and has least privilege; 5) Be cautious when running downloaded binaries (scan them, validate checksums). If you need higher assurance, request the repository URL/commit checksum from the publisher or inspect the source before use.

Type: OpenClaw Skill Name: yt-api-cli Version: 1.0.2 The OpenClaw AgentSkills skill bundle for `yt-api-cli` appears benign. The `SKILL.md` provides standard instructions for installing and configuring a YouTube Data API CLI tool from a public GitHub repository (github.com/nerveband/youtube-api-cli). It requires YouTube API credentials as environment variables, which is expected for an API client. Installation involves `go install` or `curl` to download a binary, followed by `chmod +x` and `sudo mv` to `/usr/local/bin`, all standard procedures for CLI tool setup. There are no signs of data exfiltration, malicious execution patterns (e.g., `curl|bash`), persistence mechanisms, obfuscation, or prompt injection attempts against the agent that would lead to unauthorized actions or deviation from the stated purpose.