The Agent Skills Directory

[COMMAND_EXECUTION]: The script uses subprocess.run to execute yt-dlp commands for video downloading and information fetching.
Evidence found in scripts/download_video.py where it constructs and runs shell commands based on user-provided arguments.
The implementation uses list-based arguments for subprocess.run (shell=False by default), which helps mitigate basic command injection risks.
[EXTERNAL_DOWNLOADS]: The skill includes a feature to automatically install the yt-dlp package from PyPI if it is missing.
Evidence in scripts/download_video.py function check_yt_dlp(): subprocess.run([sys.executable, "-m", "pip", "install", "--break-system-packages", "yt-dlp"], check=True).
The skill also downloads video content from YouTube as its primary function.
[SAFE]: The external resource yt-dlp is a well-known, widely-used, and reputable open-source tool for multimedia processing. The author's usage of these tools aligns with the skill's stated purpose, and no malicious patterns such as obfuscation or credential exfiltration were detected.

youtube-downloader