Cat & Dog Health Diagnostic Analysis Tool | 猫狗宠物健康诊断分析工具

Analyzes cat, dog, or bird videos to generate health reports by assessing fur, body, and facial features for potential diseases and care advice.

This skill appears to implement pet-video health analysis, but there are several red flags to consider before installing or using it: - Open-id handling is inconsistent: the SKILL.md instructs reading an api-key from smyx_common config and using it as the user's open-id. Confirm what the service expects; do not provide highly sensitive identifiers unless you trust the remote API operator. - Persistent local storage: the bundled smyx_common DAO will create a SQLite DB under the workspace/data directory and the SKILL.md says uploaded attachments will be saved to an attachments folder. If you run this skill, verify where OPENCLAW_WORKSPACE points and consider running in an isolated/sandbox workspace to avoid leaking videos or metadata. - Network endpoints: config files include production/test hostnames (e.g., lifeemergence.com and local IPs). Inspect skills/smyx_common/scripts/util.py (RequestUtil) to see exact outbound endpoints and what headers/fields are sent. If you cannot confirm the server operator, avoid uploading private videos. - Principle of least privilege: the skill declares no required env vars but reads several environment variables and config files. If you proceed, set OPENCLAW_WORKSPACE to an isolated directory and do not populate OPENCLAW_SENDER_* env vars unless intended. - Audit code before use: review skills/smyx_common/scripts/util.py and RequestUtil.http_post to confirm no unexpected data exfiltration (e.g., environment, system files) and to check TLS/hostnames. Also confirm whether the skill actually saves attachments (search for the write logic) and where. Recommendation: Treat this skill as potentially privacy-sensitive. If you need functionality, ask the author for the service owner/homepage and explicit documentation of what metadata is uploaded and retained; run it first in an isolated environment and inspect network traffic and created files. If you cannot confirm the remote API operator or the RequestUtil behavior, do not upload real user or sensitive videos.

Type: OpenClaw Skill Name: smyx-pet-analysis Version: 1.0.0 The skill bundle is a functional tool for pet health analysis that interfaces with a specific backend API (lifeemergence.com). It utilizes a shared base library (smyx_common) for handling API authentication, local state persistence via a SQLite database (smyx-common-claw.db), and recursive agent calls. The SKILL.md contains 'force' instructions designed to ensure the AI agent prioritizes cloud-based history over local memory files for data consistency. While the tool handles sensitive data like user identifiers and video uploads, its behavior is consistent with the stated purpose, and no evidence of malicious intent, unauthorized exfiltration, or backdoors was detected.