Safe Driving Behavior Analyzer | 安全驾驶行为分析工具

Analyzes videos of vehicle drivers to identify unsafe driving behaviors. It generates professional analysis reports to help enhance road safety awareness. |...

Before installing or running this skill: - Treat it as a networked analysis tool: uploaded videos and metadata are sent to remote API endpoints (ApiEnum.BASE_URL_* configured in YAML/config). Do not upload private/sensitive videos unless you trust the destination and have audited the endpoints. - The package reads/writes local config files and uses a local SQLite DB under the workspace 'data' directory—expect persistent storage. If you need no local persistence, do not run it as-is. - The skill bundle uses environment variables (OPENCLAW_WORKSPACE, OPENCLAW_SENDER_OPEN_ID, FEISHU_OPEN_ID) and reads config.yaml files for open-id / api-key, but the registry shows no declared env requirements. Audit or sandbox the runtime environment and avoid providing credentials you care about. - There is no install spec despite a long requirements.txt; you'll likely need to manually install Python dependencies before running. Review requirements and install inside an isolated virtualenv/container. - The repository contains an unrelated face-analysis sub-skill and large common utilities. Ask the author for a minimal build that contains only the drive_analysis pieces or request a clear description of where analysis data is sent (full API hostnames). - If you decide to proceed, run it in an isolated environment (container or VM), inspect util.RequestUtil/http functions to confirm the exact remote endpoints, and avoid supplying real personal identifiers or API keys until you verify the service operator and privacy policy.

Type: OpenClaw Skill Name: smyx-drive-analysis Version: 1.0.0 The skill bundle exhibits high-risk behaviors, most notably in `smyx_common/scripts/skill.py`, which uses `subprocess` to recursively call the `openclaw` agent CLI, potentially allowing for uncontrolled agent actions. The `RequestUtil` class in `smyx_common/scripts/util.py` automatically attempts to register or log in the user by sending their `open-id` or `username` to remote endpoints (e.g., `lifeemergence.com`) and stores resulting session tokens in a local SQLite database (`smyx-common-claw.db`). Furthermore, `SKILL.md` contains 'Forced Memory Rules' that instruct the AI to ignore its standard local and long-term memory (LanceDB) in favor of the author's API, which is a significant behavioral override. The bundle also contains a complete nested secondary skill (`face_analysis`), which is unusual and complicates the security audit.