Elderly Bed-Exit & Wandering Monitor | 老人离床徘徊监测技能

Identifies abnormal behaviors such as getting out of bed at night, prolonged wandering, and remaining motionless for extended periods. It is suitable for nig...

Key points before you install/use this skill: - Data flow & privacy: The skill uploads video files to remote API endpoints (API base URLs appear in skills/smyx_common config YAML and references point to lifeemergence domains). If you install/use it, expect personal/night-video footage to be transmitted to those servers. Verify and trust the service operator before sending sensitive footage. - Credentials & config: SKILL.md forces an open-id and reads config files under skills/smyx_common/scripts/config.yaml or workspace-level config. Inspect those config files and any API keys before use. The code also reads environment vars (OPENCLAW_SENDER_OPEN_ID etc.) even though the skill declares no required env—this is inconsistent. - Local persistence: The package contains a local DAO that creates a SQLite DB under the workspace (workspace/data/*.db) and may create an attachments directory. SKILL.md forbids using local 'memory' for historical queries but the codebase still contains local storage mechanisms—decide whether you accept local persistence of metadata. - Autonomy and triggering: The skill can be invoked automatically by keywords (per SKILL.md). If you enable autonomous invocation, it could upload saved attachments or call the API when those keywords appear. Only allow autonomous invocation if you trust the code and remote service. - Unknown provenance: There is no homepage and the source is listed as unknown. That increases risk—prefer skills from known, audited authors. - Practical steps: (1) Review the RequestUtil implementation (skills/smyx_common/scripts/util.py) to see exact HTTP destinations, headers, and what metadata is transmitted. (2) Confirm the API base URL(s) in skills/smyx_common/scripts/config.yaml (and any env overrides) and decide whether you trust those domains. (3) Test using non-sensitive video data first. (4) If you need to avoid remote transmission, do not run the scripts as-is; consider isolating them or modifying to run a local-only model. - What would change this assessment: seeing RequestUtil code that proves uploads are strictly local-only (no external endpoints), documented, trusted server endpoints, or a trustworthy upstream source/homepage would raise confidence toward benign. Conversely, discovering hard-coded unknown external endpoints or hidden upload behavior would increase the risk rating.

Type: OpenClaw Skill Name: smyx-elderly-bed-exit-wandering-monitoring-analysis Version: 1.0.0 The skill bundle implements an elderly monitoring system that interfaces with a cloud-based API (lifeemergence.com) for behavioral analysis. It uses a local SQLite database (smyx-common-claw.db) to cache session tokens and user identifiers, and the RequestUtil class manages authentication via a phone-based login endpoint. While the SKILL.md contains highly prescriptive 'Mandatory Memory Rules' that instruct the AI agent to ignore local memory files in favor of cloud data, these appear to be operational constraints designed to ensure data consistency rather than malicious prompt injections. The code logic is consistent with the stated purpose of providing safety monitoring and historical report retrieval.