学习类视频转笔记工具

提取视频音频，分段转写生成详细笔记和整理版，自动发送邮件通知，实现视频到笔记的完整工作流程。

This skill performs the advertised steps (ffmpeg, Whisper, produce markdown, send notifications) but has multiple red flags you should address before running it on real data or giving it credentials: 1) It expects QQ Mail credentials and a Feishu webhook but the registry metadata doesn't declare them — confirm which env vars are actually required and why. 2) The note-organizer is hard-coded to OSPF/networking content and ignores the transcriptions, so it may not produce correct notes for unrelated videos. 3) The code contains hard-coded absolute paths (/home/fangjinan/...) and invokes a qqmail script in another skill directory — verify that script's contents and that cross-skill calls are safe. 4) fix_monitor.py will modify monitor_web.py in the workspace — review that file and avoid running code that silently overwrites other files. Recommendations: review the qqmail script and monitor_web.py before use, run the skill in an isolated/sandbox environment, do not set real mailbox auth vars until you've validated the sending logic, and ask the author to remove hard-coded paths, declare required env vars in metadata, and fix the organizer to actually use transcripts (or document that it is OSPF-specific). If you cannot validate these points, treat the skill as untrusted and avoid giving it credentials or running it on sensitive data.

Type: OpenClaw Skill Name: video-note-maker Version: 1.0.0 The skill bundle exhibits several high-risk and deceptive behaviors. Most notably, the 'AI organization' logic in `video_note_maker.py` is entirely hardcoded to return OSPF networking notes, completely ignoring the actual video transcripts while the documentation (SKILL.md) claims to use 'qwen3.5-plus' for summarization. The code contains numerous hardcoded absolute paths to a specific user's home directory (`/home/fangjinan`), making it non-portable and potentially intrusive. Furthermore, `SKILL.md` explicitly mentions sending notifications to a specific external QQ email address ([email protected]), which contradicts the code's use of environment variables and poses a risk of data exfiltration. The bundle also includes `fix_monitor.py`, which performs automated string replacement/code modification on other files in the workspace.