YouTube Transcript Extractor

Extract clean, plain-text transcripts from YouTube videos using a dual fallback system with Supadata API and yt-dlp for fast, accurate results.

This skill appears to implement YouTube transcript extraction, but the documentation and shipped code disagree in several places. Before installing or providing any credentials: 1) ask the author which method is intended (Supadata API + yt-dlp, or the included node/curl scripts), 2) do not put any SUPADATA_API_KEY or other secret into an .env unless you confirm the code actually uses it, 3) if you intend to run the Node scripts, run npm install in an isolated environment and review package-lock.json (and consider npm audit), 4) be aware the shell script uses curl to fetch YouTube pages and parses captionTracks (network activity is normal for this task), and 5) if you need stronger assurance, request a corrected SKILL.md that matches the shipped scripts or a provenance link (repo/homepage) so you can verify origin and intent.

Type: OpenClaw Skill Name: yt-transcript Version: 1.0.0 The skill bundle is designed to extract YouTube video transcripts, which aligns with its stated purpose. All scripts (`yt-transcript.sh`, `transcript.js`, `transcript.mjs`) and their dependencies are focused on this functionality, making network calls only to YouTube-related domains. There is no evidence of data exfiltration, malicious execution (e.g., `curl|bash`), persistence mechanisms, or prompt injection attempts in the `SKILL.md` that would instruct an agent to perform harmful actions or access unrelated sensitive data. The mention of `SUPADATA_API_KEY` in `SKILL.md` is informational about the skill's internal workings, not an instruction for the agent to retrieve or exfiltrate it.