← 返回 Skills 市场
Stranger Proximity Alert Skill | 陌生人靠近预警技能
作者
smyx-skills
· GitHub ↗
· v1.0.0
· MIT-0
65
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install smyx-stranger-approach-warning-analysis
功能描述
Detects the appearance of strangers near minors and actively issues safety reminder alerts to protect minor safety, suitable for homes, schools, childcare ce...
安全使用建议
Proceed cautiously. What to check before installing or running: 1) Inspect/configure where uploads and DB files will be stored (OPENCLAW_WORKSPACE or skill data directory) and disable or restrict automatic saving if you don't want videos persisted. 2) Verify and control any config files in the workspace (skills/smyx_common/scripts/config.yaml and workspace-level config) — the skill will read them and could pick up API keys/open-ids silently. 3) Confirm which external API endpoints will be called (config files show lifeemergence/open-api endpoints in examples); only use endpoints you trust and ensure TLS/auth is correct. 4) The package contains many unused/extra modules and a large dependency list — run in an isolated environment and pin/inspect dependencies before installing. 5) Because this processes video of minors and uses facial recognition, check legal/privacy compliance and obtain consent; avoid running on production data until you are confident of storage, retention, and access controls. 6) If you require stricter guarantees, ask the author for a minimal build that only contains the stranger-approach logic, a documented install step, and a mode that does not persist uploads or local DB entries.
功能分析
Type: OpenClaw Skill
Name: smyx-stranger-approach-warning-analysis
Version: 1.0.0
The skill bundle contains high-risk prompt instructions in SKILL.md that command the AI agent to ignore its local memory and retrieval systems (LanceDB), forcing exclusive reliance on a remote cloud API. It implements a complex authentication and data collection framework in smyx_common/scripts/util.py and dao.py that captures user identifiers (such as phone numbers or usernames) and transmits them to a remote endpoint (lifeemergence.com) to obtain session tokens. Furthermore, smyx_common/scripts/skill.py includes functionality to execute shell commands via subprocess to interact with the OpenClaw agent CLI, which provides a powerful execution capability that could be leveraged for unauthorized actions.
能力标签
能力评估
Purpose & Capability
Name/description (stranger proximity alerts for minors) align with the code that wraps an external AI analysis API and performs face/stranger analysis. However the repository also includes unrelated modules/examples (e.g. a 'face_analysis' TCM health skill and broad common utilities), which makes the package larger and more general than the single-purpose description. That extra code is not required for a simple wrapper and may increase attack surface.
Instruction Scope
SKILL.md explicitly forbids reading local memory and LanceDB, and requires open-id be taken from specific config files or user input. In practice the code reads workspace/shared config files and environment variables (e.g. OPENCLAW_SENDER_OPEN_ID, OPENCLAW_WORKSPACE, FEISHU_OPEN_ID) via skills/smyx_common scripts. The skill also auto-saves uploaded attachments to the skill/workspace data area and contains a local SQLite DAO implementation. Those file reads/writes and automatic saving of user-uploaded video are broader than the 'do not read local memory' rule and could persist sensitive video or metadata.
Install Mechanism
No install spec is provided (instruction-only install), but the bundle contains many Python modules and a large requirements.txt in skills/smyx_common (dozens of packages). That mismatch means the skill expects a heavy Python runtime and many dependencies but does not declare how to install them. This is a friction/risk point (unexpected dependencies, unclear provenance).
Credentials
Registry metadata claims 'no required env vars', yet code reads multiple environment/config sources: OPENCLAW_SENDER_OPEN_ID/OPENCLAW_SENDER_USERNAME, OPENCLAW_WORKSPACE, and will load API config from skills/smyx_common/scripts/config.yaml or workspace-level config. The open-id acquisition flow reads config files in the skill directory and in a shared workspace; that can cause the skill to silently pick up workspace-level API keys or IDs. The CLR between declared and actual env/config access is inconsistent and meaningful for privacy/security.
Persistence & Privilege
The skill will (per SKILL.md) automatically save uploaded attachments into an attachments directory and the code includes a local SQLite Dao that writes to workspace/data (smyx-common-claw.db). Even though always:false and not forced into every agent run, the skill persists sensitive media and local DB files to the workspace without an explicit consent step documented in the metadata. That persistent storage of video of minors is sensitive and should be reviewed/controlled.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install smyx-stranger-approach-warning-analysis - 安装完成后，直接呼叫该 Skill 的名称或使用
/smyx-stranger-approach-warning-analysis触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release – Stranger Approach Warning Analysis:
- Detects strangers approaching minors using video/image analysis and issues real-time safety alerts.
- Supports customizable safety zones, personnel whitelists, and multi-level risk warnings for homes, schools, and care centers.
- Enforces cloud-based history reporting; strictly prohibits reading/writing local memory for reports.
- Requires strict open-id acquisition flow (config file/user prompt); cannot auto-generate or assume open-id values.
- Provides comprehensive CLI usage instructions and outputs standardized Markdown table for history queries.
元数据
常见问题
Stranger Proximity Alert Skill | 陌生人靠近预警技能 是什么？
Detects the appearance of strangers near minors and actively issues safety reminder alerts to protect minor safety, suitable for homes, schools, childcare ce... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 65 次。
如何安装 Stranger Proximity Alert Skill | 陌生人靠近预警技能？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install smyx-stranger-approach-warning-analysis」即可一键安装，无需额外配置。
Stranger Proximity Alert Skill | 陌生人靠近预警技能 是免费的吗？
是的，Stranger Proximity Alert Skill | 陌生人靠近预警技能 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Stranger Proximity Alert Skill | 陌生人靠近预警技能 支持哪些平台？
Stranger Proximity Alert Skill | 陌生人靠近预警技能 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Stranger Proximity Alert Skill | 陌生人靠近预警技能？
由 smyx-skills（@18072937735）开发并维护，当前版本 v1.0.0。
推荐 Skills