Scan Report
5 /100
youtube-to-feishu
Download YouTube video audio and upload to Feishu cloud storage
功能正常的 YouTube 音频下载飞书上传工具，代码行为与声明一致，无恶意行为
Safe to install
可直接使用
Findings 2 items
| Severity | Finding | Location |
|---|---|---|
| Info | 文档完整 | SKILL.md:1 |
| Info | 依赖版本锁定 | requirements.txt:1 |
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | WRITE | WRITE | ✓ Aligned | youtube_to_feishu_complete.py:55 写入TEMP_DIR |
| Shell | WRITE | WRITE | ✓ Aligned | youtube_upload.py:42 调用yt-dlp |
| Network | READ | READ | ✓ Aligned | 通过yt-dlp下载YouTube内容 |
| Environment | READ | READ | ✓ Aligned | 读取FEISHU_USER_ID |
7 findings
Medium External URL 外部 URL
https://clawhub.ai PUBLISH_GUIDE.md:24 Medium External URL 外部 URL
https://clawhub.ai/import PUBLISH_GUIDE.md:71 Medium External URL 外部 URL
https://www.youtube.com/watch?v=VIDEO_ID PUBLISH_GUIDE.md:103 Medium External URL 外部 URL
https://clawhub.ai/skills/youtube-to-feishu PUBLISH_GUIDE.md:147 Medium External URL 外部 URL
https://www.youtube.com/watch?v=dyJUscv7b9g README.md:45 Medium External URL 外部 URL
https://youtu.be/VIDEO_ID README.md:51 Medium External URL 外部 URL
https://www.youtube.com/watch?v=... index.js:70 File Tree
7 files · 24.0 KB · 890 lines Markdown 3f · 468L
Python 2f · 342L
JavaScript 1f · 79L
Text 1f · 1L
├─
index.js
JavaScript
├─
PUBLISH_GUIDE.md
Markdown
├─
README.md
Markdown
├─
requirements.txt
Text
├─
SKILL.md
Markdown
├─
youtube_to_feishu_complete.py
Python
└─
youtube_upload.py
Python
Dependencies 1 items
| Package | Version | Source | Known Vulns | Notes |
|---|---|---|---|---|
yt-dlp | >=2024.0.0 | pip | No | YouTube下载工具，知名开源项目 |
Security Positives
✓ 代码行为与SKILL.md声明完全一致
✓ 使用subprocess调用yt-dlp，无shell管道注入风险
✓ yt-dlp是知名开源工具，非恶意代码
✓ 飞书上传通过OpenClaw授权API完成，非直接HTTP请求
✓ 临时文件有清理机制
✓ 依赖版本锁定
✓ URL验证检查YouTube域名