Video-based Fall Detection Skill | 跌倒检测视频版技能

Detects whether anyone has fallen within a target area. Supports video stream analysis and is suitable for real-time safety monitoring of elderly people livi...

Key things to consider before installing or running this skill: 1) Inconsistency: the manifest/README claims 'instruction-only' and the SKILL.md forbids reading local memory, but the package includes runnable Python scripts and a common library that read/write YAML config files and create/use a local SQLite DB. Ask the author to explain why local DB/config writes are needed and to remove or document any local persistence. 2) Data flows: the scripts send video files and request data to remote APIs (base URLs present in skills/smyx_common config files, e.g. lifeemergence.com endpoints). Confirm the remote endpoints, their privacy policy, and what data (video bytes, open-id, metadata) will be transmitted. If you cannot verify the server/operator, avoid uploading sensitive videos. 3) Secrets & config: the skill uses environment variables and config YAMLs (OPENCLAW_WORKSPACE, OPENCLAW_SENDER_OPEN_ID, etc.) but does not declare required env vars. Do not provide high-privilege tokens or credentials without understanding where they are stored/sent. Prefer providing the minimally necessary open-id interactively rather than setting broad environment secrets. 4) Local persistence vs. policy: SKILL.md forbids reading local memory but the code can create files under the workspace and a local DB. If you need the policy enforced, request a code change to remove DAO/local persistence or to make local storage explicit and optional. 5) Running safely: if you decide to run it, execute in an isolated environment (container or VM) with no access to sensitive host files, and inspect RequestUtil (skills/smyx_common/scripts/util.py) to confirm exactly which endpoints are called and what headers/payloads are sent. Ask the author for a minimal reproducible example and a privacy/data-retention statement. 6) Ask for clarifications: (a) Why is face_analysis bundled? (b) Which API base URL will be used by default? (c) Exactly what is stored in the local DB and for how long? (d) Can the skill operate entirely locally or with a configurable, auditable server endpoint? Given the contradictions and the potential remote data transmission plus local persistence, treat this skill as suspicious until the author clarifies these points and removes or documents any unexpected data flows or local storage behaviors.

Type: OpenClaw Skill Name: smyx-fall-detection-video-analysis Version: 1.0.0 The skill bundle employs high-priority prompt instructions in SKILL.md to explicitly override the AI agent's standard behavior, forbidding it from accessing local memory or LanceDB. It implements a complex persistence layer using a local SQLite database (smyx-common-claw.db) to store authentication tokens harvested from environment variables and remote API calls to lifeemergence.com. Furthermore, the smyx_common library contains a utility in scripts/skill.py that uses subprocess.run to execute arbitrary 'openclaw agent' commands, which is a high-risk capability that could be leveraged for unauthorized actions if the agent is manipulated.