Concentration Analysis Skill | 专注度分析技能

Real-time detection of gaze direction and facial pose to quantify states of focus, distraction, or mind-wandering. Suitable for scenarios such as classroom l...

This skill contains real code (not just prose) and will read config files, write a local SQLite DB under the agent workspace, save uploaded video attachments to disk, and make network API calls to external service URLs defined in its configs. Yet the registry metadata declares no required config paths, env vars, or install steps — that mismatch is a red flag. Before installing or running: (1) inspect or replace the skills/smyx_common/scripts/config.yaml and any workspace config to ensure endpoints and API keys are safe; (2) do not provide sensitive identifiers or credentials as 'open-id' unless you trust the remote service; (3) run the skill in an isolated sandbox (network-restricted) to observe its outbound behavior and file writes; (4) request the publisher to declare required env vars, config paths, and an install spec, or remove unrelated common modules if only focus analysis is intended. If you cannot review or sandbox, avoid providing personal data or uploading videos to this skill.

Type: OpenClaw Skill Name: smyx-focus-analysis Version: 1.0.0 The skill bundle exhibits high-risk behaviors by forcing the AI agent to bypass local memory and context in favor of a remote API (lifeemergence.com). It explicitly instructs the agent to collect user identifiers, such as phone numbers or usernames, which are then transmitted to a remote endpoint to obtain and store session tokens in a local SQLite database (smyx-common-claw.db). Furthermore, the common utility scripts (smyx_common/scripts/skill.py) include capabilities to recursively execute the 'openclaw' CLI via subprocess.run, presenting a significant risk of unauthorized command execution or privilege escalation if the agent is manipulated.