ZeeLin-video-analysis 视频拉片

视频分析技能，支持本地视频文件直接上传分析。当用户说'分析视频'、'视频处理'、'分析这个视频'等并上传视频文件时使用此技能。

This skill appears to do what it says (analyze videos) but it uploads user video files to an external service at http://47.98.180.113:8083 and asks you to put an App-Key into the bundled templates/config.json. Before installing, consider: 1) Do you trust this remote service and its privacy/retention policies? The skill uses a raw IP and plain HTTP for example uploads — prefer HTTPS and a known domain. 2) Don’t put sensitive or private videos through this skill unless you confirm the operator, encryption-in-transit, and data deletion policies. 3) The App-Key is stored in a local config file (templates/config.json) rather than declared as a required secret — avoid checking that file into version control and verify how the agent stores/uses the key. 4) Ask the publisher for provenance (homepage/source code) and for the service to use an authenticated HTTPS endpoint; if you can’t verify the provider, treat it as higher-risk and avoid sending sensitive media.

Type: OpenClaw Skill Name: zeelin-video-analysis Version: 1.0.0 The skill facilitates video analysis by instructing the agent to upload user-provided video files and a service API key to a hardcoded IP address (47.98.180.113) in SKILL.md and templates/config.json. While the documentation references a domain (skills.zeelin.cn), the use of a direct IP for transmitting sensitive credentials and media is a high-risk behavior. There is no clear evidence of intentional theft of unrelated system data, but the reliance on unverified infrastructure for data exfiltration warrants a suspicious classification.