← Back to Skills Marketplace
Zight - video instructions capability for agents
by
Séraphin Hochart
· GitHub ↗
· v1.0.0
362
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install zight
Description
Extract structured data from Zight share links (a.cl.ly and share.zight.com), including title, stream URLs, AI smart summary, chapter markers, and full trans...
Usage Guidance
This skill appears coherent and limited to extracting metadata/transcripts from Zight share links. Before installing, consider: 1) the skill will fetch any URLs embedded in the Zight page (captions_url), so if your agent runs in an environment with access to internal hosts that could be exposed via attacker-controlled pages, enable network restrictions or review fetched URLs; 2) the SKILL.md asks the agent to ask for confirmation before using extracted step-by-step instructions — ensure your agent enforces that confirmation and won't autonomously execute actions derived from transcripts; and 3) if you need stricter controls, run this skill in a sandboxed environment or review outputs before downstream automation.
Capability Analysis
Type: OpenClaw Skill
Name: zight
Version: 1.0.0
The skill's code and documentation align with its stated purpose of extracting structured data from Zight share links. The `skill.py` effectively mitigates Server-Side Request Forgery (SSRF) by enforcing `http://` or `https://` schemes for all network requests, preventing access to local files or other protocols. Crucially, the `SKILL.md` includes explicit instructions for the AI agent to treat extracted transcript content as 'candidate input' and to 'ask the user to confirm whether the extracted instructions should be used,' directly addressing and mitigating prompt injection risks from the skill's output. There is no evidence of data exfiltration, arbitrary code execution, persistence mechanisms, or malicious prompt injection within the skill's own instructions.
Capability Assessment
Purpose & Capability
The name/description, SKILL.md, and skill.py all describe the same behavior: HTTP-first scraping of a Zight share URL to extract store JSON, stream links, and VTT captions. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
Runtime instructions and code limit actions to fetching the provided Zight URL and any captions URL discovered in that page, parsing JSON, and converting VTT to text. Note: the skill will follow the captions_url discovered in the page (an arbitrary URL); if the agent environment has access to internal networks this could be used for SSRF-style access. The SKILL.md contains a sensible confirmation rule for transcripts; enforcement of that rule depends on the agent, not this extractor.
Install Mechanism
No install spec and no external packages are required. This is effectively an instruction-only skill (a small Python extractor included), so nothing is downloaded from untrusted URLs during install.
Credentials
The skill requests no environment variables, credentials, or config paths. Its network usage is proportional to its purpose (fetching the user-supplied share URL and any captions URL exposed by that page).
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system configuration. It can be invoked autonomously by agents (default), which is normal for skills; no elevated persistence is requested.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zight - After installation, invoke the skill by name or use
/zight - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release of the Zight skill.
- Extracts metadata, chapters, smart summary, media links, and transcript text from Zight share URLs.
- Outputs structured JSON with video title, share URL, video links, smart actions, chapters, and transcript.
- Designed for use when users provide a Zight link and request reading, summarization, or automation based on video content.
Metadata
Frequently Asked Questions
What is Zight - video instructions capability for agents?
Extract structured data from Zight share links (a.cl.ly and share.zight.com), including title, stream URLs, AI smart summary, chapter markers, and full trans... It is an AI Agent Skill for Claude Code / OpenClaw, with 362 downloads so far.
How do I install Zight - video instructions capability for agents?
Run "/install zight" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Zight - video instructions capability for agents free?
Yes, Zight - video instructions capability for agents is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Zight - video instructions capability for agents support?
Zight - video instructions capability for agents is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Zight - video instructions capability for agents?
It is built and maintained by Séraphin Hochart (@phin); the current version is v1.0.0.
More Skills