YouTube SkillForge

Turn YouTube videos into structured, reusable skill files that make any AI agent smarter. Forge, compound, and recall creator-attributed knowledge.

The skill appears coherent for turning YouTube content into local skill files, but before you install: 1) Verify the npm package publisher and view the package source (check for unexpected postinstall scripts or network calls). 2) Confirm you trust the package owner — registry metadata has no homepage/source URL. 3) Expect the CLI to create ~/.skillforge/ (it says it will prompt for consent) — inspect that directory and its files after first run. 4) Understand that transcript synthesis uses whatever LLM keys your agent already has (e.g. ANTHROPIC_API_KEY); the skill doesn't ask for new credentials but will rely on existing agent-provider credentials. 5) Prefer installing yt-dlp from a trusted package manager (Homebrew) and consider running the CLI in a sandboxed environment initially. If you want higher assurance, request the skill's source code or an official homepage before adding it to production agents.

Type: OpenClaw Skill Name: youtube-skillforge Version: 4.1.2 The skill appears benign. The `SKILL.md` transparently describes its functionality, explicitly stating it does not handle user credentials and that its internal server uses stdio transport with 'no network exposure'. File system writes are confined to `~/.skillforge/` and require user consent. There are no indicators of prompt injection, data exfiltration, malicious execution, persistence mechanisms, or obfuscation in the provided files. The dependencies (`yt-dlp` and its own npm package) are standard and align with the stated purpose.