← 返回 Skills 市场

Best Practice Skill Creator

Name: Best Practice Skill Creator
Author: diffusefuturetech

作者 DiffuseFutureTech · GitHub ↗ · v1.0.0 · MIT-0

darwinlinuxwin32 ⚠ suspicious

255

总下载

当前安装

版本数

在 OpenClaw 中安装

/install best-practice-skill-creator

功能描述

Create OpenClaw skills from best practice videos or image sequences. Use when creating skill from video, generating skill from screenshots, converting tutori...

使用说明 (SKILL.md)

Best Practice Skill Creator

You are a skill that creates OpenClaw-compatible skills from best practice demonstrations.

What You Do

You accept:

Video files (mp4, mov, avi, webm) showing a best practice workflow
Image sequences (png, jpg, webp) capturing step-by-step screenshots
Text description explaining what the task accomplishes and any context

You then use a Multimodal LLM (GPT-5.4 or Gemini 3.1 Pro Preview) to:

Analyze the visual content frame by frame
Extract the step-by-step procedure
Identify tools, commands, and patterns used
Generate a complete OpenClaw-compatible skill

Usage

# From video + description
python3 best_practice_skill_creator/main.py \
  --input video.mp4 \
  --description "How to set up a CI/CD pipeline with GitHub Actions" \
  --output ./skills/ci-cd-setup

# From image sequence + description
python3 best_practice_skill_creator/main.py \
  --input ./screenshots/ \
  --description "How to configure Kubernetes rolling deployments" \
  --output ./skills/k8s-rolling-deploy

# Specify provider
python3 best_practice_skill_creator/main.py \
  --input video.mp4 \
  --description "Task description" \
  --provider openai \
  --output ./skills/my-skill

Configuration

Edit best_practice_skill_creator/config.yaml to set your MLLM provider, API key, and model.

Environment variables override config file values:

MLLM_PROVIDER — openai or gemini
MLLM_API_KEY — Your API key
MLLM_BASE_URL — Custom API endpoint
MLLM_MODEL — Model identifier

Output

The generated skill directory contains:

SKILL.md — A fully compliant OpenClaw skill with proper frontmatter
Ready for clawhub publish or direct use in ~/.openclaw/skills/

安全使用建议

Do not run this tool without checking and changing its configuration. Immediate actions to consider: - Inspect config.yaml and remove the hard-coded api_key; replace it with your own provider & key or leave it blank so you must set MLLM_API_KEY in your environment. - Confirm MLLM_BASE_URL and provider selection point to a provider you trust (OpenAI, Google Gemini, or your enterprise endpoint). The shipped default points to 'api.cloubic.com', which is unexpected. - Recognize that the tool will encode and upload full images/screenshots you provide. Avoid sending screenshots or video frames that contain passwords, tokens, private keys, or other sensitive information. - Run the tool in a controlled environment and set MLLM_API_KEY explicitly (do not rely on shipped defaults). Consider using an account with limited privileges or test quota when first trying it. - Review generated SKILL.md files before installing/publishing them, especially any required_env entries that request credentials. - If you cannot verify the embedded key's origin, prefer deleting the config entry and supplying your own credentials or using a local/offline model.

功能分析

Type: OpenClaw Skill Name: best-practice-skill-creator Version: 1.0.0 The bundle contains a hardcoded API key and configures a non-standard, untrusted API endpoint (api.cloubic.com) as the default for MLLM requests in config.yaml. This configuration creates a significant risk of credential harvesting, as any user-provided MLLM_API_KEY would be transmitted to this third-party proxy by default. Furthermore, SKILL.md references non-existent models (GPT-5.4), which is a common indicator of deceptive or low-quality software, although the core logic for video processing and skill generation in main.py and src/ appears functional.

能力评估

⚠ Purpose & Capability

The skill's purpose (generate OpenClaw skills from video/images) legitimately requires an MLLM provider and therefore an API key. However, config.yaml contains a hard-coded API key and a non-standard base_url (https://api.cloubic.com/v1) under the 'openai' provider entry, and the listed model is 'gemini-3.1-pro-preview' — an odd mismatch. That embedded key/base_url is not necessary for the stated purpose and looks like a default that would cause user data to be sent to an unexpected third-party endpoint if the user does not override it.

⚠ Instruction Scope

Runtime instructions and code encode and send base64 images (frames/screenshots) plus user descriptions to the configured MLLM provider. That behaviour is expected for the tool's function, but because the repo ships with a built-in API key & unusual endpoint, users who follow the provided commands without changing configuration will transmit potentially sensitive images and screenshots to that endpoint. The code otherwise does not read unrelated local files or secrets.

✓ Install Mechanism

No installation downloads or external installers are present; requirements.txt lists common libraries (httpx, Pillow, opencv-python, PyYAML). The package includes source files and has no network install step that would fetch arbitrary code at runtime.

⚠ Credentials

Requesting an MLLM API key (MLLM_API_KEY) is proportionate to the stated function. However, the repository hardcodes an API key in config.yaml for the 'openai' provider and points that provider to a third-party domain. That embedded credential in a distributed config is unexpected and problematic: it can cause the tool to use someone else's key and endpoint to process your data or leak your images to a party you did not choose. The skill generation code can also set required_env values in generated skills, which is reasonable but worth reviewing in outputs.

✓ Persistence & Privilege

The skill is not force-included (always: false), is user-invocable and does not request system-wide configuration changes. It writes generated skill files to a user-specified output directory only. No elevated privileges or permanent always-enabled behavior is requested.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install best-practice-skill-creator
安装完成后，直接呼叫该 Skill 的名称或使用 /best-practice-skill-creator 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release

元数据

Slug best-practice-skill-creator

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题