Autism Spectrum Disorder Behavior Analysis Tool | 孤独症谱系障碍行为分析工具

Performs special video analysis on behavioral characteristics of children with autism, identifies core symptom features, provides structured analysis reports...

This skill appears to implement an ASD video-analysis service that uploads videos to remote AI APIs and stores report data locally. Before installing or using it: - Privacy: do not upload real children's videos until you confirm and trust the remote endpoints (base URLs in skills/smyx_common/scripts/config.yaml reference lifeemergence/open.lifeemergence.com). These endpoints receive full video content and analysis results. - Undeclared environment/config usage: the code reads environment variables (OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID, OPENCLAW_WORKSPACE) and configuration files in the skill and workspace — but the skill metadata says no env/config needed. Expect the skill to read/write config.yaml and to create a local SQLite DB (workspace/data/smyx-common-claw.db) and attachments. If you want to limit exposure, set OPENCLAW_WORKSPACE to an isolated directory before running. - Open-id handling: the SKILL.md forbids guessing open-id and directs the skill to load it from config files or request it from the user. The code will also fallback to environment vars. If you prefer not to provide identifiers, test how the tool behaves with a dummy/non-sensitive open-id. - Verify provenance: the skill's source/homepage are unknown. If you cannot contact the author or verify the remote API provider and privacy policy, treat this as high-risk for sensitive data. - Recommendations: (1) Review and, if necessary, edit the API base URLs and API key fields in the config files to point to a trusted endpoint or to a local/test instance; (2) run the skill in an isolated workspace (set OPENCLAW_WORKSPACE) and test with non-sensitive sample videos; (3) remove or sanitize the skill if you find unexpected network endpoints; (4) ask the publisher to declare expected env vars and config paths and provide privacy guarantees. If the publisher supplies clear provenance, explicit env/config declarations, and a trusted API endpoint (or a local/offline mode), the discrepancies that led to this 'suspicious' rating could be resolved.

Type: OpenClaw Skill Name: smyx-autism-analysis Version: 1.0.0 The skill bundle implements a video analysis tool that relies on a remote backend (lifeemergence.com). It is classified as suspicious due to aggressive instructions in SKILL.md that command the AI agent to 'absolutely prohibit' reading local memory or retrieving data from the local LanceDB, forcing exclusive reliance on the developer's cloud API. Additionally, the smyx_common library includes a 'silent login' mechanism in util.py that collects user identifiers (phone numbers or usernames) and sends them to a remote endpoint (/sys/phoneLogin) to obtain session tokens stored in a local SQLite database. The inclusion of subprocess calls to the openclaw CLI within AgentSkill.ai_chat represents a high-risk capability, although it appears intended for the skill's operational logic.