Unattended Monitoring Skill | 无人陪伴监测技能

Determines when elderly people living alone have no interaction or visitors for extended periods, and actively pushes care reminders to family members, suita...

What to know before installing: - Network behavior: The skill uploads user-supplied images/videos to a remote API for analysis. Default production config references lifeemergence.com endpoints. If you cannot trust that remote service, do not use the skill with real camera streams or identifiable footage. - Undeclared local accesses: Despite metadata claiming no required config/envs, the code reads environment variables (e.g., OPENCLAW_SENDER_OPEN_ID, OPENCLAW_WORKSPACE, FEISHU_OPEN_ID) and looks for config files under skills/smyx_common/scripts/config.yaml (also in a workspace-level path). It will also write attachments and an SQLite DB under the workspace data directory. Expect files to be stored locally. - Privacy: This skill handles sensitive camera footage of people (elderly). Confirm you have consent from those recorded and verify where data is uploaded/stored and retention policies. - Contradiction in SKILL.md: The docs forbid reading local memory files but the code includes a local DAO and will create/use local storage — ask the author to clarify. - Dependency/installation: There's no install spec; the skill requires Python dependencies (requests and many packages under smyx_common). Installing the full requirements may be required for correct operation. - Actionable checks before use: 1) Request the developer to enumerate exact config paths and environment variables the skill will read/write and list the production API endpoints and data retention policy. 2) If you plan to test, run the skill in an isolated sandbox/workspace, avoid using real camera feeds, and inspect the created files (attachments, sqlite DB). 3) If you need to keep data local only, ask for a mode that performs on-device inference or explicit opt-out of remote uploads. What would reduce concern: explicit declared required env vars and config paths in metadata, clear opt-in/out for remote uploads, and confirmation that workspace/config access is strictly limited to the skill's own directory (no cross-skill config reads).

Type: OpenClaw Skill Name: smyx-unaccompanied-monitoring-analysis Version: 1.0.0 The skill bundle implements a remote monitoring service for elderly care that exhibits high-risk data handling behaviors. Key indicators include instructions in SKILL.md that explicitly command the AI agent to bypass local memory/logs and force all data retrieval through a remote API (lifeemergence.com), and logic in scripts/smyx_common/scripts/util.py for 'silent' user registration and login using phone numbers or usernames. While these features support the stated goal of remote monitoring, the aggressive redirection of sensitive surveillance data to external endpoints and the automated management of credentials in a local SQLite database (dao.py) represent significant privacy and security risks.