Yt Dlp Download Skill

yt-dlp-powered downloader for YouTube, Bilibili, X (Twitter), TikTok/Douyin, and more. Given a video URL, download video (720p/1080p/best), extract MP3/audio...

This skill appears to do what it claims (use yt-dlp to download media), but it includes a helper script that builds a shell command and runs it via eval without validating URLs. That creates a command-injection risk: a maliciously crafted URL could cause arbitrary commands to run. Before installing or enabling this skill: - Inspect or replace scripts/download.sh. Prefer invoking yt-dlp with an argument array (no eval) or use bash exec with properly quoted parameters. Validate the URL scheme (http/https) and reject or sanitize unexpected characters (quotes, semicolons, backticks). - If you still want to use it, do not enable autonomous invocation for this skill (require user confirmation before any download), or run it in a strict sandbox/container. - Be cautious about the '--cookies-from-browser' behavior: it can access browser cookies if yt-dlp can read them — only use when you understand and consent to that. - If you lack the ability to audit/patch the script, prefer running yt-dlp manually or using an alternative skill with safer command invocation. If you proceed, apply the minimal-privilege principle and only enable the skill for trusted users/contexts.

Type: OpenClaw Skill Name: yt-dlp-download-skill Version: 1.0.1 The skill provides legitimate video downloading functionality via yt-dlp but contains a shell injection vulnerability in 'scripts/download.sh' due to the use of 'eval' on unsanitized input variables ($URL and $DOWNLOAD_PATH). While the 'SKILL.md' and 'skill.yaml' instructions explicitly advise the AI agent to validate URLs and avoid arbitrary shell execution, the helper script itself is architecturally flawed. No evidence of intentional malice, data exfiltration, or persistence was found.