← 返回 Skills 市场
zhu-xiao-di

unisk_video_notification

作者 ZhangKai · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
87
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install video-notification
功能描述
向指定手机号发送视频通知(基于 IVVR 平台)。需要提供服务器上已存在的视频文件绝对路径,文件大小不超过 5MB。
安全使用建议
This skill delegates sending video notifications to an HTTP service you must run. Before installing: (1) Verify API_BASE_URL points to a server you control (not an unknown third party). The skill will send X-API-Key to that URL, so keep API_KEY secret and only give it to trusted endpoints. (2) Deploy and review the referenced server code (send_video_api.py) yourself — ensure it enforces the 5 MB limit, validates file paths, and restricts which filesystem locations can be read to avoid exposing sensitive files. (3) Use HTTPS and firewall/ACLs to limit access to the service. (4) Be cautious when the agent auto-extracts parameters from chat — confirm phone numbers and file paths before sending. If you cannot audit the server code or you must call an external provider, treat the API_KEY and phone data as sensitive and only proceed with a trusted provider.
功能分析
Type: OpenClaw Skill Name: video-notification Version: 1.0.0 The skill facilitates sending video notifications by passing absolute server file paths to a remote API endpoint via the 'file_path' parameter in SKILL.md. This design pattern is high-risk as it could enable path traversal or unauthorized file access on the backend server if the receiving API (referenced as send_video_api.py) lacks strict validation. While the stated purpose is benign, the architectural choice to handle raw server paths via an AI agent is a significant security vulnerability.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
Name/description match the behavior: the SKILL.md documents calling a POST /send_video_notice on a user-provided service. Required env vars (API_BASE_URL, API_KEY) are exactly what such a proxy would need and no unrelated credentials or binaries are requested.
Instruction Scope
Instructions stay within the expected scope (extract phone numbers and file_path from conversation and call the configured endpoint). Note: the doc references a deployable server script send_video_api.py which is not included here — the user must deploy their own server. The skill does not instruct the agent to read local files or other system secrets; it only forwards a file path string to the remote API.
Install Mechanism
Instruction-only skill with no install spec and no code files - lowest install risk. There is nothing downloaded or written to disk by the skill itself.
Credentials
Only two env vars are required (API_BASE_URL and API_KEY), which are proportional and necessary for calling the user's HTTP service. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. Model invocation is allowed (default), which is expected for an agent skill.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install video-notification
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /video-notification 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
v1.0.0
元数据
Slug video-notification
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

unisk_video_notification 是什么?

向指定手机号发送视频通知(基于 IVVR 平台)。需要提供服务器上已存在的视频文件绝对路径,文件大小不超过 5MB。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 87 次。

如何安装 unisk_video_notification?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install video-notification」即可一键安装,无需额外配置。

unisk_video_notification 是免费的吗?

是的,unisk_video_notification 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

unisk_video_notification 支持哪些平台?

unisk_video_notification 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 unisk_video_notification?

由 ZhangKai(@zhu-xiao-di)开发并维护,当前版本 v1.0.0。

💬 留言讨论