55/100 (Medium)

OpenClaw： suspicious
VirusTotal： benign
StaticScan： suspicious

OpenClaw： suspicious

The skill's code matches its description (it uses yt-dlp to fetch YouTube captions), but packaging and metadata inconsistencies and an unexpected package-lock file raise supply-chain / install-time co...

[内容已截断]

VirusTotal： benign VT 报告

静态扫描： suspicious

Detected: suspicious.dangerous_exec, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1773662905987,
        "_id": "k97ez9x10nftwkjyetay0tztax830179",
        "changelog": "Fetch and summarize any YouTube video transcript using yt-dlp. Cleans auto-captions, supports all languages.",
        "changelogSource": "user",
        "createdAt": 1773662905987,
        "version": "1.0.0"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "Nerikko",
        "handle": "nerikko",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/112247568?v=4",
        "kind": "user",
        "linkedUserId": "kn75xbms6pd7xzk55893nz7f3h824btw"
    },
    "ownerHandle": "nerikko",
    "skill": {
        "_creationTime": 1773662905987,
        "_id": "kd78446c1zr7pn7qr0cc76zzex830e01",
        "badges": [],
        "createdAt": 1773662905987,
        "displayName": "ytdlp-transcript — YouTube to Text via yt-dlp",
        "latestVersionId": "k97ez9x10nftwkjyetay0tztax830179",
        "ownerUserId": "kn75xbms6pd7xzk55893nz7f3h824btw",
        "slug": "ytdlp-transcript",
        "stats": {
            "comments": 0,
            "downloads": 112,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 1
        },
        "summary": "Fetch and summarize transcripts from any YouTube video. Paste a URL and your agent reads the video for you — summarize, translate, extract insights.",
        "tags": {
            "latest": "k97ez9x10nftwkjyetay0tztax830179"
        },
        "updatedAt": 1774335237682
    }
}