AI Notes of Video
v1.0.0Generate document, outline, and image-text AI notes by providing a video URL, using Baidu's video analysis and note extraction APIs.
⭐ 4· 5k·40 current·44 all-time
bybaidu_qianfan@baiduqianfangroup
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/intent (generate AI notes from a video) matches the code and runtime instructions: the two Python scripts call Baidu endpoints to create and poll an AI-notes task. However the registry-level metadata provided with the skill did not declare the BAIDU_API_KEY or python requirement while SKILL.md does — that mismatch is a packaging/documentation inconsistency.
Instruction Scope
SKILL.md instructs setting BAIDU_API_KEY and running the two python scripts. The scripts only POST/GET the provided video URL and task ID to Baidu endpoints; they do not locally download or parse video content despite text in the description that implies local download/processing. The agent will transmit the video URL and your BAIDU_API_KEY to qianfan.baidubce.com — expected for this skill but something to consider for privacy (e.g., internal URLs or private content will be sent to a third party).
Install Mechanism
There is no install spec (instruction-only), so nothing is written to disk beyond the included scripts. The scripts require Python and the requests library, but no dependency/install step is provided — this is an operational omission rather than a malicious install mechanism.
Credentials
The only secret the code reads is BAIDU_API_KEY, which is appropriate for a Baidu API integration. The incoherence is that the registry metadata did not declare this required env var while SKILL.md and the scripts do — the missing declaration reduces transparency but the requested credential itself is proportional to the skill's purpose.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It relies on runtime invocation and has normal autonomous-invocation enabled (disable-model-invocation=false), which is standard and expected.
Assessment
This skill sends whatever video URL you provide (and your BAIDU_API_KEY) to a Baidu endpoint (qianfan.baidubce.com). Only use it with content and URLs you are comfortable sending to that third party and only if you trust the BAIDU_API_KEY owner. Note the package lacks an install section — you must ensure Python and the requests library are available in the runtime. Also be aware of a documentation mismatch: the SKILL.md claims local download/parse but the scripts simply submit the URL to the remote service. If you need stronger assurances, verify the endpoint and API key behavior with test inputs or run the scripts in an isolated environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk974tq2ph6ejwvqjaxqhvzfp7980j14j
License
MIT-0
Free to use, modify, and redistribute. No attribution required.