Baby Sleep State Monitoring Skill | 婴儿睡眠状态监测技能

Identifies sleep states like deep sleep, light sleep, waking, and restlessness. Generates daily sleep reports and schedule analysis to help parents understan...

What to consider before installing or running this skill: - Data flow and privacy: The skill uploads video files (local or URL) to a cloud API controlled by the package configuration (skills/smyx_common/scripts/config.yaml). Verify and trust the remote service (base URLs and API owner) before sending sensitive baby-monitoring footage. - open-id and credentials: The runtime enforces obtaining an 'open-id' (from config or user input). Do not supply personal credentials, usernames, or phone numbers unless you trust the service; question why the skill needs persistent identifiers. - Local persistence: The skill will save uploaded attachments to a local attachments folder and may create a SQLite DB under the workspace/data directory. If that is unacceptable, run the skill in a sandbox or inspect/clean those directories after use. - Incoherence to resolve: SKILL.md forbids reading local memory, yet the code reads config files and uses a local DAO — ask the maintainer to explain this contradiction and provide the authoritative privacy policy and endpoint documentation. - Code provenance: There is no homepage and the source owner is unknown. Request the source or a trusted repo and confirm the API endpoints and their privacy/security controls. Review the implementation of RequestUtil (skills/smyx_common/scripts/util.py) to see exactly how and where data is transmitted. - Operational mitigations: If you decide to run it, do so in an isolated environment (container/VM), review and edit skills/smyx_common/scripts/config.yaml to point to a trusted API or blank out endpoints, and avoid providing real personal identifiers until you confirm the backend. Because the package bundles shared/common modules and unrelated analysis code and performs both local persistence and network uploads without clear provenance, treat it cautiously — verify the backend, inspect RequestUtil, and prefer sandboxed execution.

Type: OpenClaw Skill Name: smyx-infant-sleep-monitoring-analysis Version: 1.0.0 The skill bundle provides infant sleep monitoring by analyzing video files via a cloud-based API. It relies on a shared utility library (smyx_common) that manages user sessions and tokens using a local SQLite database (smyx-common-claw.db). While SKILL.md contains 'Mandatory Memory Rules' that strictly instruct the AI agent to ignore local memory files and rely solely on the cloud API (lifeemergence.com), these appear to be functional requirements for maintaining data synchronization with the backend service rather than malicious prompt injection. The code follows standard patterns for API integration and lacks indicators of unauthorized data exfiltration or malicious command execution.