Yt Assemblyai Monitor

YouTube channel monitor and video transcription using AssemblyAI cloud API. Pure Python + requests only — no ffmpeg, no Whisper, no extra tools needed. Monit...

This skill appears to perform the advertised YouTube→AssemblyAI workflow, but there are two issues to consider before installing: (1) the registry metadata does NOT list the AssemblyAI API key requirement despite the SKILL.md and code requiring ASSEMBLYAI_API_KEY — provide the key only if you trust and understand the billing/usage implications; (2) the code includes a hard-coded innertube API key fallback (a Google API key string) and suggests storing your AssemblyAI key in data/config.json (plaintext) — prefer using the ASSEMBLYAI_API_KEY environment variable rather than a config file to reduce accidental exposure. Also note the provided scripts/monitor.py in the package snapshot is truncated, so the audit is incomplete; you should inspect the full source before running. Recommended actions: review the full monitor.py, run the script in a sandbox or isolated environment, avoid committing config.json to version control, and monitor your AssemblyAI account for unexpected usage after enabling the skill.

Type: OpenClaw Skill Name: yt-assemblyai-monitor Version: 1.0.1 The skill is a functional YouTube channel monitor and transcription tool that uses the AssemblyAI cloud API. It extracts audio URLs from YouTube using the internal 'innertube' API (via `scripts/monitor.py`) and submits them for remote transcription. The code is well-structured, lacks obfuscation, and does not exhibit signs of data exfiltration, unauthorized execution, or malicious prompt injection.