小剪刀视频剪辑

小剪刀AI视频剪辑skill。

This skill implements the expected video-editing flow but has several red flags you should consider before installing: (1) It requires a service token (appsecret/XJD_TOKEN) but does not declare it in the registry; the SKILL.md instructs the agent to ask you to paste the token into chat — do NOT paste long-lived or sensitive tokens into a chat. Prefer setting XJD_TOKEN as an environment variable in a controlled environment. (2) The code will upload your video/audio to external services (biyi.cxtfun.com and api-cutflow.fun.tv) and will send the token in request headers; only use with content you are comfortable sending to those domains. (3) The package relies on Python libraries (requests, pycryptodome) not declared in metadata — ensure dependencies are managed in an isolated environment. (4) If you decide to proceed, create a limited-scope or short-lived token (if possible), test with non-sensitive sample videos, and review the endpoints and AES-key mapping in crypto.py to confirm they match the official service. If you need the skill but want tighter safety, ask the author to (a) declare required env vars (XJD_TOKEN), (b) remove the instruction to paste tokens in chat, and (c) declare/install runtime dependencies.

Type: OpenClaw Skill Name: xiaojiandao Version: 1.0.1 The skill bundle is a comprehensive integration for the 'Xiao Jian Dao' (小剪刀) AI video editing platform. It provides tools for video uploading, OCR-based subtitle extraction, AI-generated commentary, and final video composition using scripts like bridge.py, oss_upload.py, and subtitle_ocr.py. While the client.py script collects system telemetry (OS, CPU model, and architecture) and crypto.py uses hardcoded AES keys for API communication with biyi.cxtfun.com and api-cutflow.fun.tv, these behaviors appear aligned with the service's operational requirements and do not exhibit signs of malicious intent, data exfiltration, or unauthorized command execution.