maple-video2article

从视频生成图文并排的文章（md格式）。支持本地视频文件或在线视频URL（自动下载），自动完成文本提取、视频帧截取、时间轴匹配、文章撰写全流程。

This skill appears to implement the advertised workflow (download video, transcribe, capture frames, match timeline, and compose a markdown article) but take these precautions before installing or running it: - Dependency checklist: ensure your environment has Python 3 and install the required system packages and Python modules used by the scripts (yt-dlp, ffmpeg/ffprobe or imageio‑ffmpeg, opencv-python-headless, faster-whisper + its model files, av, opencc, etc.). The package does not declare these at the top level, so installation is manual. - Network activity: expect the skill to download remote videos and to fetch Whisper model files on first run. If you need to avoid network downloads or large model pulls, do not run it or prepare an offline environment with models preinstalled. - Inspect files: review the included Python scripts (video_downloader.py, video_to_text.py, video_frame_capture.py, timeline_matcher.py) yourself — they run subprocesses and write/delete files. There is no evidence of exfiltration endpoints, but local file I/O and subprocess calls are present and should be reviewed if you have sensitive data on the same host. - Prompt-injection artifact: SKILL.md contains unicode control characters flagged by the scanner. Open SKILL.md and the other text files in a plain text editor, remove or examine any invisible characters, and ensure instructions are as expected before granting the skill authority to run. - Run in isolation: run the skill in a sandboxed or isolated environment (VM, container, or dedicated account) the first time to observe behavior, disk writes, and network calls. - Legal/licensing: using yt-dlp and downloading videos may raise copyright or ToS issues depending on content and jurisdiction — ensure you have rights to download and repurpose the videos. If you want, I can: (1) list the exact pip/system packages to install for these scripts, (2) highlight the exact places in the code that perform network or subprocess calls, or (3) show how to run the scripts safely inside a temporary container.

Type: OpenClaw Skill Name: maple-video-article Version: 1.0.5 The skill bundle provides a legitimate and well-documented workflow for converting videos into articles. The included Python scripts (video_downloader.py, video_to_text.py, video_frame_capture.py, and timeline_matcher.py) use standard libraries such as yt-dlp, faster-whisper, and OpenCV to perform their stated functions. The SKILL.md file contains detailed operational instructions for the AI agent, including security-conscious warnings against executing untrusted URL content and logical justifications for its processing steps. No evidence of malicious intent, data exfiltration, or unauthorized system access was found.