← Back to Skills Marketplace
yutaigu

briefing

by Yutai Gu · GitHub ↗ · v1.0.9
cross-platform ⚠ suspicious
479
Downloads
0
Stars
0
Active Installs
10
Versions
Install in OpenClaw
/install briefing-skill
Description
Automatically track creator channels and transcribe new videos (YouTube, Bilibili, TikTok) with zero token cost during the pipeline. Use memory-based updates...
README (SKILL.md)

Briefing Operator

This skill operates the briefing CLI tool.

Available Commands

  • Run update pipeline: briefing

  • Add tracking URL: briefing -add \x3Csource_url>

  • Delete tracking URL: briefing -delete \x3Csource_url>

  • Set config key: briefing -set \x3CKEY> \x3CVALUE>

  • Show config: briefing -show


Execution Rules (Strict)

  1. Bootstrap Check: Before any execution, if the briefing binary is missing from PATH:

    • Check if {skillDir}/install.sh exists.
    • If found, execute bash {skillDir}/install.sh to initialize the environment.
    • If initialization fails or script is missing, report: "briefing CLI not found. Please run the install script manually." and stop.
  2. Bash Tool Requirement: Always execute the CLI command using bash/exec. If bash is disabled, report: "bash tool is disabled. Enable commands.bash=true." and stop.

  3. Absolute Path Fallback: If briefing is not in global PATH, try executing via {skillDir}/briefing (if the installer symlinks it there).


After Running briefing

  1. Parse stdout.

  2. Detect lines matching:

    [WHISPER DONE] \x3Cfilename>

  3. For each \x3Cfilename>, read:

    output/\x3Cfilename>/whisper.txt

  4. Return the extracted whisper content.

  5. If no [WHISPER DONE] appears, report: "No new whisper output generated in this run."

  6. If a whisper file is missing, report the exact missing path.


Fallback

If briefing is not available on PATH:

  • Attempt execution using an absolute path if known.
  • If still unavailable, report and stop.

Do not manually edit config.json. Always use CLI commands.

Usage Guidance
This skill appears to be a wrapper for a third-party CLI and its installer will clone a GitHub repo, install packages with pip, and place an executable in your PATH (possibly using sudo). These behaviors are coherent with a CLI-based transcription tool, but they also let remote code run on your machine. Before installing or allowing the agent to run the install script: 1) Review the repository contents (especially requirements.txt and main.py) to ensure you trust the code and packages being installed. 2) Prefer running install.sh manually in a controlled environment (container, VM, or non-privileged user account) rather than allowing the agent to execute it automatically. 3) Avoid running the installer with sudo unless you understand why system-wide install is needed; use INSTALL_DIR and BIN_DIR to install into a local directory instead. 4) If you do not trust the upstream repo, set REPO_URL to a vetted source or decline installation. 5) If you want to be extra cautious, block or disable commands.bash for autonomous agents so the agent cannot run the installer automatically.
Capability Analysis
Type: OpenClaw Skill Name: briefing-skill Version: 1.0.9 The skill is classified as suspicious due to the `install.sh` script's extensive use of `sudo` for system-wide package installations (e.g., `ffmpeg`, Python) and for placing the launcher binary in `/usr/local/bin`. It also modifies user shell configuration files (`.bashrc`, `.zshrc`, `.profile`) to update the PATH. While these actions are plausibly needed for the skill's stated purpose of video processing and transcription, they represent significant system-level modifications and broad permissions. Additionally, the `REPO_URL` in `install.sh` can be overridden by an environment variable, which, while defaulting to a legitimate GitHub URL, presents a potential supply chain vulnerability if the execution environment is compromised. There is no evidence of intentional malicious behavior like data exfiltration or unauthorized backdoors.
Capability Assessment
Purpose & Capability
The skill claims to run a 'briefing' CLI that tracks channels and transcribes videos. The installer and runtime expectations (Python 3.12, ffmpeg, a launcher that runs main.py) are consistent with that purpose.
Instruction Scope
SKILL.md requires executing the briefing CLI via bash and instructs the agent to automatically run the provided install.sh if the binary is missing. That gives the skill the ability to run an installer script automatically at runtime; the script clones a repo and installs/executes code — a wider scope than merely running a local CLI binary.
Install Mechanism
install.sh clones a GitHub repo (REPO_URL default), creates a Python venv, pip-installs requirements from the repo, and writes a launcher into /usr/local/bin or ~/.local/bin (using sudo if available). Cloning and pip-installing arbitrary repository code at install time is a moderate-to-high risk action (remote code execution surface). The repo host is GitHub (reasonable), but the script executes code from that repo (main.py) after installation.
Credentials
The skill declares no required credentials or env vars. The installer itself supports overrides (REPO_URL, INSTALL_DIR, BIN_DIR, PYTHON_BIN), which is normal for an installer but means changing env values can redirect the install to other code. No direct exfiltration or credential access is requested by SKILL.md.
Persistence & Privilege
The installer modifies user shell profile files to add the launcher directory to PATH and installs a persistent launcher script in system or user bin. always:false (not force-included), but the installer still makes persistent changes to the user's environment if run.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install briefing-skill
  3. After installation, invoke the skill by name or use /briefing-skill
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.9
Version 1.0.9 - Added automatic bootstrap logic: checks for an install script and runs it if the `briefing` CLI is missing from PATH. - Improved fallback: attempts to run `briefing` using an absolute path inside the skill directory if not globally available. - Adjusted error messages to guide users on running/installing the CLI when missing. - Clarified and updated execution rules in SKILL.md for robustness.
v1.0.8
No user-visible changes in this release; documentation and configuration remain the same. No file changes detected.
v1.0.7
- Improved installation metadata with a "formula" and "bins" field for better bundled installation support. - No functional changes to operator instructions or commands.
v1.0.6
- Added explicit OS requirements (Linux, macOS) to metadata for improved compatibility clarity. - No other changes to functionality or usage.
v1.0.5
- Added install.sh script for easier installation. - Switched metadata install method to "bundled" and updated the install label. - Added an emoji ("📺") to metadata. - No functional changes to the skill logic or usage.
v1.0.4
- metadata.openclaw.emoji field removed and always field added. - Removed OS-specific install restriction; install instructions are now provided for all platforms. - No changes to commands or operational logic.
v1.0.3
- Updated installation metadata: clarified install command and label, added emoji, and removed unnecessary "requires" field. - No change to command usage or CLI behavior. - Documentation and metadata improvements only; no functional updates.
v1.0.2
- Improved skill description for clarity and conciseness, emphasizing automatic tracking and zero token cost. - No changes to functionality or implementation; documentation only.
v1.0.1
- Updated description to clarify the skill downloads and transcribes all videos from specified creator channels (YouTube, Bilibili, Tiktok), avoiding duplicates and skipping already processed items. - Clarified that no LLM tokens are used during the download/transcription pipeline. - Added official installation script details to metadata for improved installation guidance.
v1.0.0
- Major update: skill now operates the briefing CLI tool directly. - Previous logic for gathering and composing daily briefings from calendar, todos, and weather has been removed. - New commands: run update pipeline, manage tracking URLs, modify and inspect config. - Handles post-processing of generated whisper output files if present. - Strict error reporting for missing CLI, bash tool, or whisper files. - Documentation and user guidance rewritten to reflect new CLI-driven workflow.
Metadata
Slug briefing-skill
Version 1.0.9
License
All-time Installs 0
Active Installs 0
Total Versions 10
Frequently Asked Questions

What is briefing?

Automatically track creator channels and transcribe new videos (YouTube, Bilibili, TikTok) with zero token cost during the pipeline. Use memory-based updates... It is an AI Agent Skill for Claude Code / OpenClaw, with 479 downloads so far.

How do I install briefing?

Run "/install briefing-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is briefing free?

Yes, briefing is completely free (open-source). You can download, install and use it at no cost.

Which platforms does briefing support?

briefing is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created briefing?

It is built and maintained by Yutai Gu (@yutaigu); the current version is v1.0.9.

💬 Comments