Video Understanding

视频理解与分析能力 - 让 AI 能够理解视频内容、提取关键信息。当用户要求分析视频、理解视频内容、总结视频、提取视频要点时触发此技能。

This skill appears to do what it says: fetch video metadata and summarize content. Things to consider before installing or using it: - If you want full transcription/speech-to-text, the skill suggests downloading audio/subtitles and using extra tools (e.g., yt-dlp plus an STT service). Installing yt-dlp (pip) or using an external STT service can download/process user content and may send it to third-party servers — only proceed if you trust those tools/services. - The YouTube Data API example needs an API_KEY; only provide API keys you trust and limit their scope. The skill itself does not request any credentials, but you may be prompted to supply them if you want API-based metadata rather than simple web scraping. - Downloading videos can touch copyrighted or private material. Ensure you have permission before downloading or transcribing content. - If you require stricter safety, ask for an explicit statement of where transcriptions or downloaded media will be sent (local-only processing vs. remote transcription API) and whether the agent will persist files on disk. Overall this skill is coherent and proportional to its purpose, but be mindful of optional external installs and transcription service choices.

Type: OpenClaw Skill Name: video-learn Version: 1.0.0 The skill aims to understand and analyze video content. The `references/resources.md` file documents the `yt-dlp` command-line tool, providing examples like `yt-dlp "URL"` and `yt-dlp --write-subs "URL"`. Given that `SKILL.md` mentions 'speech to text (needs extra tools)', it is highly probable the AI agent will be instructed to use `yt-dlp` with user-provided video URLs. Executing `yt-dlp` with unsanitized user input creates a critical shell injection vulnerability, leading to potential Remote Code Execution (RCE). This constitutes a significant security risk, classifying the skill as suspicious due to this severe vulnerability.