技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 1 · 957 · 0 current installs · 0 all-time installs
⭐ 1
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：alti-systems/yt-transcript
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's documentation (SKILL.md) and declared behavior do not match the actual code: the README claims a Supadata API + yt-dlp fallback and a specific installed command path, but the shipped scripts use different libraries and direct curl calls and there is no install or env declaration for the claimed API key.
目的
SKILL.md claims the primary method is a Supadata API (SUPADATA_API_KEY in .env) with a yt-dlp fallback and exposes a command at /root/clawd/yt-transcript. None of the three shipped scripts reference Supadata or yt-dlp, and the files are named transcript.js/.mjs/yt-transcript.sh rather than an installed binary at the documented path. The actual code uses youtube-captions-scraper, youtubei.js, and direct curl parsing of the YouTube page — which …
说明范围
SKILL.md instructs callers to run /root/clawd/yt-transcript and references an external API key and yt-dlp fallback. The runtime instructions are inconsistent with the included scripts: the scripts output timestamps (contradicting the claim 'timestamps removed'), fetch YouTube pages with curl, and call Node libraries. The README is vague/incorrect about what will be run and where, giving the agent broad/ambiguous discretion (e.g., 'Primary: Sup…
安装机制
There is no install spec (instruction-only), which reduces install-time risk. However package.json and package-lock.json are included, implying Node dependencies must be installed for the .js/.mjs scripts to work; SKILL.md does not document this. No external downloads, shorteners, or obscure URLs are present in the provided files. The lack of an installation step is an inconsistency to be aware of (user or runtime may need to run npm install).
证书
SKILL.md says an API key SUPADATA_API_KEY should be stored in .env, but requires.env lists no environment variables and none of the shipped scripts reference SUPADATA_API_KEY or any other secret. The documentation asks for a credential that the code does not use — this is misleading and could cause users to expose a key unnecessarily if they follow the docs.
持久
The skill does not request always:true, does not declare system-wide config changes, and does not require binaries or config paths. It will perform network requests (curl and library HTTP calls) to fetch YouTube pages, which is expected for its purpose.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「YouTube Transcript Extractor」。简介：Extract clean, plain-text transcripts from YouTube videos using a dual fallback…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/alti-systems/yt-transcript/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。