video-subtitle-skill

为视频/音频自动生成字幕，支持多语言识别、翻译、说话人分离、字幕烧入视频

This skill largely does what it claims (extract audio, call SenseAudio, write SRT/VTT/TXT, optionally burn subtitles), but there are important mismatches you should address before use: 1) The package metadata does not declare the required SENSEAUDIO_API_KEY or ffmpeg/ffprobe even though the script needs them — treat that as an omission, not a feature. 2) The SKILL.md echoes the API key to stdout which can leak the secret to logs or other observers; remove that echo or avoid running it. 3) Review the included scripts (scripts/video_subtitle.py) for any code paths that post data to endpoints you don't expect (the script appears to call only https://api.senseaudio.cn). 4) Run the skill in an isolated environment (or with an API key with limited quota) until you confirm behavior. 5) If you plan to install, ensure ffmpeg/ffprobe are present and supply the SENSEAUDIO_API_KEY securely (do not paste it into chat or run the provided echo). If you want higher confidence, ask the author to update metadata to declare the env var/binaries and to remove the secret-echoing line.

Type: OpenClaw Skill Name: video-subtitle-skill Version: 1.0.0 The skill bundle is a legitimate tool for generating video subtitles via the SenseAudio ASR API. The core logic in `scripts/video_subtitle.py` uses `ffmpeg` for media processing and the `requests` library to interact with the specified API endpoint (api.senseaudio.cn). No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the instructions in `SKILL.md` correctly guide the agent to perform ASR tasks and summarize results locally.