Skip to content
← Registry
Trust Report

youtube-instant-article

Transform YouTube videos into Telegraph Instant View articles with visual slides and timestamped summaries. Use this skill whenever a user shares a YouTube URL (youtube.com or youtu.be) and asks to summarize, explain, or process the video. This is the DEFAULT skill for all YouTube video requests - do NOT use the generic summarize tool for YouTube.

83
CONDITIONAL
Format: openclawScanner: v0.8.0Duration: 7msScanned: 6d ago · Jun 1, 1:52 PMSource →
Embed this badge
AgentVerus CONDITIONAL 83AgentVerus CONDITIONAL 83AgentVerus CONDITIONAL 83
[![AgentVerus](https://agentverus.ai/api/v1/skill/23e37754-1bcc-4c56-a504-ea0df8f97f23/badge)](https://agentverus.ai/skill/23e37754-1bcc-4c56-a504-ea0df8f97f23)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/23e37754-1bcc-4c56-a504-ea0df8f97f23/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"23e37754-1bcc-4c56-a504-ea0df8f97f23","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/23e37754-1bcc-4c56-a504-ea0df8f97f23/trust

Category Scores

94
Permissions
75
Injection
92
Dependencies
85
Behavioral
65
Content
100
Code Safety

Findings (6)

highComprehensive secret collection detected-25

Found comprehensive secret collection pattern: "extract key"

├─► summarize --slides (extract key frames)

Skills should not instruct collection of all tokens, keys, or credentials. Access only the specific credentials needed and declare them.

injectionASST-05
mediumCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: curl

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
mediumThird-party AI provider dependency-8

The skill relies on third-party AI providers or APIs, expanding the remote dependency surface for prompts, inputs, or generated artifacts.

OpenAI API

Review which external services or providers the skill depends on, what data crosses that boundary, and whether the dependency is necessary for the intended workflow.

dependenciesASST-04
mediumHigh-risk workflow lacks explicit safety boundaries-15

The skill performs or enables higher-risk operations but does not define explicit safety boundaries describing what it must not do.

No safety boundary patterns found alongside high-risk capability language

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
mediumSkill path discovery detected (inside code block)-5

Found skill path discovery pattern: "{baseDir}"

source /Users/viticci/clawd/.env && {baseDir}/scripts/generate.sh "$ARGUMENTS"

Treat dynamic skill path resolution and installation-path discovery as local filesystem reconnaissance. Scope which paths may be read or executed from, and avoid broad path probing unless the user explicitly requested it.

behavioralASST-03
mediumExternal AI provider delegation detected-10

Found external ai provider delegation pattern: "OpenAI API"

- OpenAI API key with GPT-5.2 access

Treat external AI-provider calls as data egress. Make it explicit what prompts, files, or images are sent to third-party providers and require approval before forwarding sensitive content.

behavioralASST-02