← 返回 Skills 市场
yutaigu

briefing

作者 Yutai Gu · GitHub ↗ · v1.0.9
cross-platform ⚠ suspicious
479
总下载
0
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install briefing-skill
功能描述
Automatically track creator channels and transcribe new videos (YouTube, Bilibili, TikTok) with zero token cost during the pipeline. Use memory-based updates...
使用说明 (SKILL.md)

Briefing Operator

This skill operates the briefing CLI tool.

Available Commands

  • Run update pipeline: briefing

  • Add tracking URL: briefing -add \x3Csource_url>

  • Delete tracking URL: briefing -delete \x3Csource_url>

  • Set config key: briefing -set \x3CKEY> \x3CVALUE>

  • Show config: briefing -show


Execution Rules (Strict)

  1. Bootstrap Check: Before any execution, if the briefing binary is missing from PATH:

    • Check if {skillDir}/install.sh exists.
    • If found, execute bash {skillDir}/install.sh to initialize the environment.
    • If initialization fails or script is missing, report: "briefing CLI not found. Please run the install script manually." and stop.
  2. Bash Tool Requirement: Always execute the CLI command using bash/exec. If bash is disabled, report: "bash tool is disabled. Enable commands.bash=true." and stop.

  3. Absolute Path Fallback: If briefing is not in global PATH, try executing via {skillDir}/briefing (if the installer symlinks it there).


After Running briefing

  1. Parse stdout.

  2. Detect lines matching:

    [WHISPER DONE] \x3Cfilename>

  3. For each \x3Cfilename>, read:

    output/\x3Cfilename>/whisper.txt

  4. Return the extracted whisper content.

  5. If no [WHISPER DONE] appears, report: "No new whisper output generated in this run."

  6. If a whisper file is missing, report the exact missing path.


Fallback

If briefing is not available on PATH:

  • Attempt execution using an absolute path if known.
  • If still unavailable, report and stop.

Do not manually edit config.json. Always use CLI commands.

安全使用建议
This skill appears to be a wrapper for a third-party CLI and its installer will clone a GitHub repo, install packages with pip, and place an executable in your PATH (possibly using sudo). These behaviors are coherent with a CLI-based transcription tool, but they also let remote code run on your machine. Before installing or allowing the agent to run the install script: 1) Review the repository contents (especially requirements.txt and main.py) to ensure you trust the code and packages being installed. 2) Prefer running install.sh manually in a controlled environment (container, VM, or non-privileged user account) rather than allowing the agent to execute it automatically. 3) Avoid running the installer with sudo unless you understand why system-wide install is needed; use INSTALL_DIR and BIN_DIR to install into a local directory instead. 4) If you do not trust the upstream repo, set REPO_URL to a vetted source or decline installation. 5) If you want to be extra cautious, block or disable commands.bash for autonomous agents so the agent cannot run the installer automatically.
功能分析
Type: OpenClaw Skill Name: briefing-skill Version: 1.0.9 The skill is classified as suspicious due to the `install.sh` script's extensive use of `sudo` for system-wide package installations (e.g., `ffmpeg`, Python) and for placing the launcher binary in `/usr/local/bin`. It also modifies user shell configuration files (`.bashrc`, `.zshrc`, `.profile`) to update the PATH. While these actions are plausibly needed for the skill's stated purpose of video processing and transcription, they represent significant system-level modifications and broad permissions. Additionally, the `REPO_URL` in `install.sh` can be overridden by an environment variable, which, while defaulting to a legitimate GitHub URL, presents a potential supply chain vulnerability if the execution environment is compromised. There is no evidence of intentional malicious behavior like data exfiltration or unauthorized backdoors.
能力评估
Purpose & Capability
The skill claims to run a 'briefing' CLI that tracks channels and transcribes videos. The installer and runtime expectations (Python 3.12, ffmpeg, a launcher that runs main.py) are consistent with that purpose.
Instruction Scope
SKILL.md requires executing the briefing CLI via bash and instructs the agent to automatically run the provided install.sh if the binary is missing. That gives the skill the ability to run an installer script automatically at runtime; the script clones a repo and installs/executes code — a wider scope than merely running a local CLI binary.
Install Mechanism
install.sh clones a GitHub repo (REPO_URL default), creates a Python venv, pip-installs requirements from the repo, and writes a launcher into /usr/local/bin or ~/.local/bin (using sudo if available). Cloning and pip-installing arbitrary repository code at install time is a moderate-to-high risk action (remote code execution surface). The repo host is GitHub (reasonable), but the script executes code from that repo (main.py) after installation.
Credentials
The skill declares no required credentials or env vars. The installer itself supports overrides (REPO_URL, INSTALL_DIR, BIN_DIR, PYTHON_BIN), which is normal for an installer but means changing env values can redirect the install to other code. No direct exfiltration or credential access is requested by SKILL.md.
Persistence & Privilege
The installer modifies user shell profile files to add the launcher directory to PATH and installs a persistent launcher script in system or user bin. always:false (not force-included), but the installer still makes persistent changes to the user's environment if run.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install briefing-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /briefing-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.9
Version 1.0.9 - Added automatic bootstrap logic: checks for an install script and runs it if the `briefing` CLI is missing from PATH. - Improved fallback: attempts to run `briefing` using an absolute path inside the skill directory if not globally available. - Adjusted error messages to guide users on running/installing the CLI when missing. - Clarified and updated execution rules in SKILL.md for robustness.
v1.0.8
No user-visible changes in this release; documentation and configuration remain the same. No file changes detected.
v1.0.7
- Improved installation metadata with a "formula" and "bins" field for better bundled installation support. - No functional changes to operator instructions or commands.
v1.0.6
- Added explicit OS requirements (Linux, macOS) to metadata for improved compatibility clarity. - No other changes to functionality or usage.
v1.0.5
- Added install.sh script for easier installation. - Switched metadata install method to "bundled" and updated the install label. - Added an emoji ("📺") to metadata. - No functional changes to the skill logic or usage.
v1.0.4
- metadata.openclaw.emoji field removed and always field added. - Removed OS-specific install restriction; install instructions are now provided for all platforms. - No changes to commands or operational logic.
v1.0.3
- Updated installation metadata: clarified install command and label, added emoji, and removed unnecessary "requires" field. - No change to command usage or CLI behavior. - Documentation and metadata improvements only; no functional updates.
v1.0.2
- Improved skill description for clarity and conciseness, emphasizing automatic tracking and zero token cost. - No changes to functionality or implementation; documentation only.
v1.0.1
- Updated description to clarify the skill downloads and transcribes all videos from specified creator channels (YouTube, Bilibili, Tiktok), avoiding duplicates and skipping already processed items. - Clarified that no LLM tokens are used during the download/transcription pipeline. - Added official installation script details to metadata for improved installation guidance.
v1.0.0
- Major update: skill now operates the briefing CLI tool directly. - Previous logic for gathering and composing daily briefings from calendar, todos, and weather has been removed. - New commands: run update pipeline, manage tracking URLs, modify and inspect config. - Handles post-processing of generated whisper output files if present. - Strict error reporting for missing CLI, bash tool, or whisper files. - Documentation and user guidance rewritten to reflect new CLI-driven workflow.
元数据
Slug briefing-skill
版本 1.0.9
许可证
累计安装 0
当前安装数 0
历史版本数 10
常见问题

briefing 是什么?

Automatically track creator channels and transcribe new videos (YouTube, Bilibili, TikTok) with zero token cost during the pipeline. Use memory-based updates... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 479 次。

如何安装 briefing?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install briefing-skill」即可一键安装,无需额外配置。

briefing 是免费的吗?

是的,briefing 完全免费(开源免费),可自由下载、安装和使用。

briefing 支持哪些平台?

briefing 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 briefing?

由 Yutai Gu(@yutaigu)开发并维护,当前版本 v1.0.9。

💬 留言讨论