video-summarize

视频总结，触发：1.用户给视频链接（B站/YouTube/抖音/Twitter/TikTok等）、2.总结这个视频

This skill largely implements video→subtitle→transcribe→summarize, but it performs actions you should review before installing: (1) install_dependency.sh will attempt to install Homebrew (via curl of the official installer), add brew to your shell profile (~/.zprofile), install system packages (ffmpeg, whisper-cpp) and pip packages in a virtualenv, and download a Whisper model file; (2) process.sh will use yt-dlp with --cookies-from-browser chrome which accesses your browser cookies (potentially exposing authenticated content and private cookies); (3) the scripts assume a Homebrew-capable environment (macOS/Linux with brew) despite no OS restriction. Recommendations: inspect the install and process scripts line-by-line; run the install steps manually rather than as a single unattended script; if you don't want the skill to access browser cookies, remove/avoid the --cookies-from-browser option; consider running the skill in an isolated VM/container; and if you are uncomfortable with Homebrew or shell-profile modifications, do not run the installer or adapt it to your environment (install dependencies yourself and supply the model). If you need a lower-privilege alternative, ask the author to provide a containerized image or clearer, non-invasive install instructions.

Type: OpenClaw Skill Name: video-summarize Version: 1.0.2026041402 The skill automates video transcription and summarization using yt-dlp and whisper.cpp, but it includes high-risk behaviors. Specifically, scripts/process.sh attempts to access sensitive browser data by using the '--cookies-from-browser chrome' flag when processing YouTube links, which could expose session data. Additionally, scripts/install_dependency.sh uses a curl|bash pattern to install Homebrew and performs system-level package installations, which are high-privilege actions that could be abused if the source is compromised.