video-transcript

SUSPICIOUS. The core purpose is plausible, but the YouTube and Douyin paths rely heavily on third-party intermediary websites and browser interception rather than official APIs, creating unnecessary data-flow and credential-trust risk. Dependencies are mostly legitimate, so this is not confirmed malware, but the skill’s actual footprint is broader and riskier than a narrowly scoped transcript extractor.