← Back to Skills Marketplace
subtitle-refiner
by
TrueTechLabs
· GitHub ↗
· v1.0.0
· MIT-0
336
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install subtitle-refiner
Description
智能优化 SRT 字幕，去除语气词并修正 ASR 错误，保持时间戳不变，输出优化文件并发送飞书通知及 token 报告。
Usage Guidance
Before installing or enabling this skill: 1) Treat SILICONFLOW_API_KEY as required despite the top-level registry metadata omission; do not set a production key until you review/modify the code. 2) Inspect scripts/refine.py completely (the visible portion already prints the Bearer token and entire request/response JSON to stderr) — remove or silence any logging that prints the API key or full response bodies. 3) Verify how Feishu file sending is authenticated (the SKILL.md asks for chat_id but provides no Feishu token variable); confirm there is no hidden upload endpoint or unexpected external recipient. 4) Consider running the skill in an isolated environment with a throwaway API key and without sensitive subtitles to observe behavior. 5) Ask the author to fix the manifest inconsistency (declare required env vars) and to stop logging secrets and full user content. If you cannot confirm these fixes, do not provide real API keys or sensitive files to this skill.
Capability Analysis
Type: OpenClaw Skill
Name: subtitle-refiner
Version: 1.0.0
The skill is functional and performs its stated task of subtitle refinement; however, it contains a significant security flaw in `scripts/refine.py`. The script explicitly prints the sensitive `SILICONFLOW_API_KEY` to `stderr` during the `call_siliconflow_api` function for debugging purposes. While this appears to be a verbose logging practice rather than intentional malice, it results in the leakage of API credentials into process logs, meeting the criteria for a 'suspicious' classification due to high-risk vulnerability.
Capability Assessment
Purpose & Capability
The description, SKILL.md and code all describe using the SiliconFlow LLM to refine SRT files, so requiring SILICONFLOW_API_KEY is coherent with purpose. However the registry metadata at the top (Required env vars: none) contradicts SKILL.md and the code which expect SILICONFLOW_API_KEY — an inconsistency that should be resolved before trusting the skill.
Instruction Scope
SKILL.md instructs the agent to run scripts/refine.py and to obtain a Feishu chat_id from context and a workspace dir. The script (visible portions) logs full request payloads and the Authorization header (Bearer <API_KEY>) and full response JSON to stderr — this will expose the API key and user's subtitle content in logs. SKILL.md also promises sending files to Feishu but does not declare any Feishu credentials or explain how auth is performed, creating ambiguity about where data and files are sent and what credentials are used.
Install Mechanism
There is no external installer or remote download; the skill is instruction-only with packaged Python scripts. That reduces installer risk. The skill does rely on Python and the requests library (which may need to be present), but no high-risk install URL or archive extraction is present.
Credentials
Requiring SILICONFLOW_API_KEY is proportionate to using SiliconFlow. However: (1) the registry metadata omitted that requirement (incoherent declarations); (2) the script prints the API key to stderr (leaks a secret); and (3) the skill sends output to Feishu but does not declare Feishu credentials/environment variables, so it's unclear what credentials the script will use to post files — this ambiguity plus explicit key-leaking is a privacy/security concern.
Persistence & Privilege
The skill is not set to always:true and does not request system-wide configuration changes. It does include code that will be executed (Python), but it does not request permanent platform privileges in the manifest.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install subtitle-refiner - After installation, invoke the skill by name or use
/subtitle-refiner - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of subtitle-refiner – a tool for optimizing SRT subtitle files.
- Removes filler words (e.g., 嗯, 啊) and corrects ASR recognition errors (e.g., XGBT→ChatGPT) while preserving timestamps.
- Sends optimized files and token usage reports via Feishu.
- Requires Python 3 and a SILICONFLOW_API_KEY environment variable.
- Provides clear error handling and token consumption tracking.
- User-invocable by sending SRT files or trigger keywords (e.g., "优化字幕", "fix subtitle").
Metadata
Frequently Asked Questions
What is subtitle-refiner?
智能优化 SRT 字幕，去除语气词并修正 ASR 错误，保持时间戳不变，输出优化文件并发送飞书通知及 token 报告。 It is an AI Agent Skill for Claude Code / OpenClaw, with 336 downloads so far.
How do I install subtitle-refiner?
Run "/install subtitle-refiner" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is subtitle-refiner free?
Yes, subtitle-refiner is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does subtitle-refiner support?
subtitle-refiner is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created subtitle-refiner?
It is built and maintained by TrueTechLabs (@truetechlabs); the current version is v1.0.0.
More Skills