Extracts and structures key points, evidence, and actionable insights from YouTube lecture subtitles for review and teaching purposes.

Before installing or running this skill, consider the following: (1) The script forces all HTTP(S) requests it makes through a local proxy at 127.0.0.1:26739 — verify why a proxy is required and what that proxy does. A malicious or misconfigured local proxy could forward transcripts or other data off your machine. (2) Metadata inconsistencies exist (different slug/version/homepage and an unused 'requests' dependency); these suggest the package may have been modified or not properly maintained. (3) If you still want to use it, inspect the code yourself (it is short), remove or neutralize the PROXY lines (os.environ['HTTP_PROXY'] / HTTPS_PROXY) or change them to a proxy you control, and run it in an isolated environment where you can monitor outgoing connections (e.g., sandbox, VM, or with network monitoring enabled). (4) If you cannot verify the proxy's purpose or origin, avoid running the script with a proxy listener present. If you need help auditing the proxy behavior or removing the proxy lines, provide the proxy's configuration or allow an isolated test run for network capture — that would raise confidence.

Type: OpenClaw Skill Name: bradford-lecture-analyzer Version: 1.0.1 The skill explicitly configures an HTTP/HTTPS proxy to `http://127.0.0.1:26739` in `scripts/analyze_lecture.py` and lists it as a dependency in `SKILL.md`. This forces all network traffic from the skill to be routed through a local proxy. While there is no direct evidence of malicious intent such as data exfiltration to a remote server, backdoors, or prompt injection with harmful objectives, this unusual network configuration creates a significant vulnerability. A co-located malicious process could potentially intercept, log, or tamper with the skill's network communications, making it suspicious rather than benign.