video-transcript-downloader
Audited by Runlayer on Feb 21, 2026
Malicious tool definition detected
Tool: .gitignore Description: node_modules
Malicious tool definition detected
Tool: SKILL.md Description: --- name: video-transcript-downloader description: Download videos, audio, subtitles, and clean paragraph-style transcripts from YouTube and any other yt-dlp supported site.
Malicious tool definition detected
Tool: package-lock.json Description: { "name": "video-transcript-downloader", "version": "1.0.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "video-transcript-downloader", "version": "1.0.0", "dependencies": { "youtube-transcript-plus": "^1.1.1"
Malicious tool definition detected
Tool: package.json Description: { "name": "video-transcript-downloader", "version": "1.0.0", "private": true,
Malicious tool definition detected
Tool: scripts/vtd.js [1/2] Description: #!/usr/bin/env node import { spawn } from "node:child_process"; import fs from "node:fs"; import os from "node:os"; import path from "node:path"; import { fileURLToPath } from "node:url"; import { YoutubeTranscript } from "youtube-transcript-plus"; const __filename = fileURLToPath(import.meta.url); const __dirname = path.dirname(__filename); function die(message, code = 1) { process.stderr.write(String(message).trimEnd() + " "); process.exit(code); } funct
Tool: scripts/vtd.js [2/2] Description: const paragraph = toParagraph(segments, { keepBrackets }); if (!paragraph) die("empty transcript from subtitles"); process.stdout.write(paragraph + " "); } finally { fs.rmSync(tmpDir, { recursive: true, force: true }); } } async function cmdSubs({ url, lang, outputDir, extra }) { if (!url) die("missing --url"); const { tmpDir, subtitlePath } = await ytDlpSubtitlesToTemp({ url, lang, extra, }); try { const out = path.resolve(outputDir); fs.mkdirSync(out, {