WeChat Channel Live Replay

(已验证) 根据视频号名称搜索用户并下载指定日期的直播回放视频，支持自动转写直播稿。

This skill appears to implement the advertised functionality, but there are important inconsistencies and privacy implications you should consider before installing: - The registry entry does not declare the TikHub API token or config path, but SKILL.md and the script require you to store tikhub_api_token in ~/.openclaw/config.json (or provide TIKHUB_TOKEN). If that config file contains other secrets, the script will read it to find the token — review that file first. - The script accesses the network (api.tikhub.io and media URLs returned by the API) and will download media to your machine and write transcriptions into ~/.openclaw/skills/live-replay-analyzer/input and workspace/data. Ensure you are comfortable with those write locations and have sufficient disk space. - It requires ffmpeg on PATH and the Whisper package (local transcription). Confirm you install those from trusted sources. - The SKILL.md source URL is a placeholder; provenance is weak. If you don't fully trust this package, run it in a sandbox or inspect the full export.py yourself. Check the full remainder of the script (the provided file was truncated in the listing) for any unexpected network calls or data exfiltration paths. Actionable steps before installing: 1) Open and inspect ~/.openclaw/config.json to ensure it only contains keys you are willing to expose to the skill; consider creating a dedicated TikHub token with limited scope. 2) Review the complete export.py file locally for any additional endpoints or behaviors not covered in SKILL.md. 3) Run the tool in an isolated environment (container or VM) if you are unsure, and monitor network activity during first runs. 4) If you rely on a centralized skill registry, ask the publisher to update registry metadata to declare required env vars and config paths so the requirements and permissions are explicit.

Type: OpenClaw Skill Name: wechat-channel-live-replay Version: 1.0.0 The skill is a legitimate tool designed to download and transcribe WeChat Channel live replays using the TikHub API (api.tikhub.io). The code in export.py correctly handles API authentication via a user-provided token, implements robust input sanitization for filenames to prevent injection during subprocess calls to ffmpeg, and follows the stated purpose in SKILL.md without any evidence of malicious intent or unauthorized data exfiltration.