Is michaelgathara/youtube-watcher safe?
Yes. michaelgathara/youtube-watcher is safe to install. Oathe's behavioral security audit gave the youtube-watcher skill by michaelgathara a trust score of 92/100 with 3 findings, none critical or high.
https://clawhub.ai/michaelgathara/youtube-watcher
Is michaelgathara/youtube-watcher safe to install?
This skill is a legitimate YouTube transcript extraction utility that uses yt-dlp to download video transcripts. The code is clean and does what it claims without hidden functionality.
What security issues were found in michaelgathara/youtube-watcher?
Category Scores
Findings (3)
LOW Subprocess call with user input -15 ▶
The script passes user-provided URLs directly to yt-dlp via subprocess.run. While yt-dlp handles URL validation, this could potentially be exploited if yt-dlp has vulnerabilities.
INFO External network dependency -10 ▶
Skill makes legitimate network connections to YouTube API for transcript extraction, which is required for its stated functionality.
INFO External dependency installation -5 ▶
Skill requests installation of yt-dlp dependency, which is clearly documented and required for functionality.
Should I install michaelgathara/youtube-watcher?
Oathe's verdict for michaelgathara/youtube-watcher is SAFE with a trust score of 92/100. Recommendation: Install.