ytdlp-transcript — YouTube to Text via yt-dlp

Fetch and summarize transcripts from any YouTube video. Paste a URL and your agent reads the video for you — summarize, translate, extract insights.

This skill appears to do what it says: run yt-dlp to download captions and clean them. Before installing or running it, note three things: 1) SKILL.md and package.json require yt-dlp, but the top-level metadata omitted that — make sure you install yt-dlp from an official source (e.g., the yt-dlp releases or your package manager) and don't assume it's already present. 2) The repo includes a package-lock.json that contains many dependencies not listed in package.json — avoid blindly running npm install without reviewing the lockfile and understanding what will be installed; consider running the single script directly with Node and an explicit yt-dlp binary instead of doing a full npm install. 3) Run the script in a sandbox or with limited privileges first (it writes temp files and spawns yt-dlp which will access the network). If you need higher assurance, ask the publisher to reconcile the metadata (declare yt-dlp as required) and to provide a minimal, consistent package-lock or remove it if not needed.

Type: OpenClaw Skill Name: ytdlp-transcript Version: 1.0.0 The skill is a functional utility designed to fetch and clean YouTube transcripts using the `yt-dlp` command-line tool. The core logic in `transcript.js` includes strict regex validation for YouTube video IDs and uses `spawnSync` to execute commands safely without shell interpolation. While there is a discrepancy between the dependencies listed in `package.json` and the more extensive `package-lock.json`, the script itself does not utilize these extra libraries, and no evidence of malicious intent, data exfiltration, or harmful instructions was found.