← Back to Skills Marketplace
zhu-xiao-di

unisk_video_notification

by ZhangKai · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
87
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install video-notification
Description
向指定手机号发送视频通知(基于 IVVR 平台)。需要提供服务器上已存在的视频文件绝对路径,文件大小不超过 5MB。
Usage Guidance
This skill delegates sending video notifications to an HTTP service you must run. Before installing: (1) Verify API_BASE_URL points to a server you control (not an unknown third party). The skill will send X-API-Key to that URL, so keep API_KEY secret and only give it to trusted endpoints. (2) Deploy and review the referenced server code (send_video_api.py) yourself — ensure it enforces the 5 MB limit, validates file paths, and restricts which filesystem locations can be read to avoid exposing sensitive files. (3) Use HTTPS and firewall/ACLs to limit access to the service. (4) Be cautious when the agent auto-extracts parameters from chat — confirm phone numbers and file paths before sending. If you cannot audit the server code or you must call an external provider, treat the API_KEY and phone data as sensitive and only proceed with a trusted provider.
Capability Analysis
Type: OpenClaw Skill Name: video-notification Version: 1.0.0 The skill facilitates sending video notifications by passing absolute server file paths to a remote API endpoint via the 'file_path' parameter in SKILL.md. This design pattern is high-risk as it could enable path traversal or unauthorized file access on the backend server if the receiving API (referenced as send_video_api.py) lacks strict validation. While the stated purpose is benign, the architectural choice to handle raw server paths via an AI agent is a significant security vulnerability.
Capability Tags
requires-sensitive-credentials
Capability Assessment
Purpose & Capability
Name/description match the behavior: the SKILL.md documents calling a POST /send_video_notice on a user-provided service. Required env vars (API_BASE_URL, API_KEY) are exactly what such a proxy would need and no unrelated credentials or binaries are requested.
Instruction Scope
Instructions stay within the expected scope (extract phone numbers and file_path from conversation and call the configured endpoint). Note: the doc references a deployable server script send_video_api.py which is not included here — the user must deploy their own server. The skill does not instruct the agent to read local files or other system secrets; it only forwards a file path string to the remote API.
Install Mechanism
Instruction-only skill with no install spec and no code files - lowest install risk. There is nothing downloaded or written to disk by the skill itself.
Credentials
Only two env vars are required (API_BASE_URL and API_KEY), which are proportional and necessary for calling the user's HTTP service. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. Model invocation is allowed (default), which is expected for an agent skill.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install video-notification
  3. After installation, invoke the skill by name or use /video-notification
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
v1.0.0
Metadata
Slug video-notification
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is unisk_video_notification?

向指定手机号发送视频通知(基于 IVVR 平台)。需要提供服务器上已存在的视频文件绝对路径,文件大小不超过 5MB。 It is an AI Agent Skill for Claude Code / OpenClaw, with 87 downloads so far.

How do I install unisk_video_notification?

Run "/install video-notification" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is unisk_video_notification free?

Yes, unisk_video_notification is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does unisk_video_notification support?

unisk_video_notification is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created unisk_video_notification?

It is built and maintained by ZhangKai (@zhu-xiao-di); the current version is v1.0.0.

💬 Comments