Smart Baby Safety Care Skill | 婴儿智能安全看护技能

Monitors infant behavior via visual AI, automatically identifying high-risk actions like rolling over, mouth/nose obstruction, climbing, or falling from bed,...

Before installing or running this skill, consider the following: 1) Network & privacy: videos you upload (or the agent uploads on your behalf) are sent to external API endpoints (config shows domains like lifeemergence.com by default). If you require local-only processing, do not use this skill. 2) Config & secrets: the skill will read config YAMLs under skills/smyx_common and the workspace-level config (OPENCLAW_WORKSPACE). Verify those config files do not contain unrelated secrets you don't want this skill to access. 3) Data persistence: the skill creates a local SQLite DB and may save attachments/reports in the workspace/data or attachments directory — rotate/delete stored videos if needed. 4) Open-id handling: the skill requires an 'open-id' value and enforces looking it up from config or user input; avoid supplying sensitive identifiers (real phone numbers / credentials) unless you understand how the remote API uses them. 5) Code review: if you plan to use this in production, inspect RequestUtil and api_service implementations to confirm exactly which endpoints, headers, and authentication tokens are used, and test the skill with non-sensitive sample videos in an isolated environment. 6) Dependencies: the skill lists many Python packages; ensure you install them in a virtualenv or container to avoid dependency conflicts. If you cannot audit the remote API or confirm acceptable privacy handling, treat this skill as high-risk and do not run it on sensitive data.

Type: OpenClaw Skill Name: smyx-infant-safety-monitoring-analysis Version: 1.0.0 The skill bundle contains high-risk capabilities and aggressive prompt instructions. Specifically, `skills/smyx_common/scripts/skill.py` includes an `ai_chat` method that executes arbitrary OpenClaw agent commands via `subprocess.run`, providing a path for potential privilege escalation or unauthorized actions. The `SKILL.md` file uses 'Mandatory Memory Rules' to force the agent to ignore local memory and LanceDB, which overrides standard agent behavior. Furthermore, `skills/smyx_common/scripts/util.py` implements a silent registration/login flow that sends user identifiers (phone numbers/usernames) to remote endpoints at `lifeemergence.com` to retrieve session tokens. While these features are framed as supporting a cloud-integrated infant monitoring service, the combination of RCE-like CLI access and strict prompt-based memory bypasses is highly risky.