Community code plugin. Review compatibility and verification before install.
Latest release: v0.1.4Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The declared purpose is read-only YouTube data access through TubeAlfred, and the code registers matching tools for videos, transcripts, comments, channels, playlists, search, hashtags, suggestions, and URL resolution.
Instruction Scope
Runtime behavior is limited to user-invoked OpenClaw tools that build scoped API requests from provided parameters; there are no hidden agent instructions, prompt overrides, or unrelated actions.
Install Mechanism
The package is a community npm/OpenClaw plugin with source-linked metadata but no provenance attestation; artifacts contain no install hooks or setup scripts beyond normal OpenClaw plugin registration.
Credentials
The plugin needs network access and a TubeAlfred API key, which are proportionate to its purpose; it does not read local files, execute shell commands, or access browser/session stores.
Persistence & Privilege
The API key is configured as a sensitive setting and sent as a bearer token to the configured API base URL; there is no background persistence or privilege escalation, but users should avoid untrusted API base URL overrides.
Scan Findings in Context
[SkillSpector advisory scan] expected: Reported no issues; artifact review also found the exposed behavior consistent with the read-only TubeAlfred integration.
[Static scan] expected: Reported no suspicious patterns; manual inspection found fetch-based API calls but no file access, shell execution, obfuscation, or destructive behavior.
[VirusTotal telemetry] expected: Reported clean engine results; this supports but does not determine the benign verdict.
Assessment
Install only if you trust TubeAlfred with the YouTube queries and identifiers your agents request. Use a TubeAlfred API key limited to the documented youtube.read scope, and leave the API base URL at the default unless you intentionally need a local or staging endpoint.Verification
Tags
TubeAlfred YouTube OpenClaw Plugin
Read-only TubeAlfred YouTube API tools for OpenClaw agents. It lets agents fetch YouTube video, transcript, comment, reply, channel, Shorts, playlist, community, search, hashtag, suggestion, and URL resolution data through your TubeAlfred account.
Requirements
- OpenClaw installed locally.
- A TubeAlfred account.
- A TubeAlfred API key with the
youtube.readscope.
Create an API key in TubeAlfred:
https://tubealfred.com/app/api-keys
Choose Create key, select the youtube.read scope, then copy the key immediately. TubeAlfred only shows the full key once.
Install
openclaw plugins install clawhub:@tubealfred/tubealfred-youtube
openclaw plugins enable tubealfred-youtube
openclaw gateway restart
Configure
Set a TubeAlfred API key in your OpenClaw config:
{
plugins: {
entries: {
"tubealfred-youtube": {
enabled: true,
config: {
apiKey: "ta_live_..."
}
}
}
}
}
Use the key you created at https://tubealfred.com/app/api-keys.
Advanced config:
{
plugins: {
entries: {
"tubealfred-youtube": {
enabled: true,
config: {
apiKey: "ta_live_...",
apiBaseUrl: "https://api.tubealfred.com",
timeoutMs: 30000,
retries: 1
}
}
}
}
}
Tools
This plugin mirrors the TubeAlfred MCP/API YouTube surface with vendor-prefixed OpenClaw tool names:
tubealfred_youtube_video_get
tubealfred_youtube_video_transcript
tubealfred_youtube_comments_list
tubealfred_youtube_comments_page
tubealfred_youtube_replies_list
tubealfred_youtube_replies_page
tubealfred_youtube_channel_get
tubealfred_youtube_channel_about
tubealfred_youtube_channel_videos
tubealfred_youtube_channel_shorts
tubealfred_youtube_channel_playlists
tubealfred_youtube_channel_community
tubealfred_youtube_search_query
tubealfred_youtube_search_hashtag
tubealfred_youtube_search_suggest
tubealfred_youtube_playlist_get
tubealfred_youtube_url_resolve
All tools are read-only and call https://api.tubealfred.com.
Development
pnpm install
pnpm test
pnpm typecheck
pnpm build
Local OpenClaw install:
openclaw plugins install --link .
openclaw plugins enable tubealfred-youtube
openclaw plugins inspect tubealfred-youtube --runtime --json
Publish
clawhub package publish . --dry-run
clawhub package publish .
The ClawHub package name is:
@tubealfred/tubealfred-youtube
