AI 字幕
v1.0.12面向字幕与上字场景的 Sparki skill 变体，沿用最新版官方 Sparki 安装、API key、上传和命令说明，同时保留字幕场景定位。
⭐ 0· 153·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description describe a Sparki captioning variant and the package includes a Sparki CLI that uploads video, creates projects, polls status, and downloads results. The only declared primary credential is SPARKI_API_KEY and the allowed network domain is agent-api.sparki.io, which match the code's behavior. Required fs writes are limited to the skill's own config and workspace paths. The single required binary 'uv' is plausible as the environment tooling referenced in SKILL.md (used by the declared install command).
Instruction Scope
SKILL.md instructs the agent to proactively use the skill for video/captioning scenarios and specifies upload methods (local path or Telegram mini‑app). The instructions do not ask the agent to read unrelated system files or exfiltrate data beyond the Sparki API. One operational note: the guidance to 'use this skill FIRST and PROACTIVELY' is behaviorally broad (could increase how often the skill is invoked) but not a technical data-exfiltration concern.
Install Mechanism
The SKILL.md includes an 'install' entry that runs 'uv sync' rather than downloading arbitrary archives; no external URLs or extract operations are present. However, registry metadata initially labeled the package as 'instruction-only' despite the presence of multiple Python source files and an install step — this inconsistency is worth noting. You should confirm what 'uv sync' does in your environment before running it.
Credentials
Only SPARKI_API_KEY is declared as the primary credential; the code also optionally reads SPARKI_UPLOAD_TG_LINK and will persist API key to ~/.openclaw/config/sparki.json if the setup command is used. These variables and config writes are proportional to a client that must authenticate to the Sparki backend.
Persistence & Privilege
always is false, the skill requests only its own config and workspace paths and network access to agent-api.sparki.io. It does not attempt to modify other skills or global agent settings. The write to ~/.openclaw/config to store API keys is expected for a CLI and is declared in permissions.
Assessment
This skill appears to be what it says: a Sparki-based captioning CLI that needs a Sparki API key and writes config/output under ~/.openclaw. Before installing: (1) verify the SPARKI_API_KEY you supply is from the official Sparki service and consider using a limited-scope key if available; (2) inspect or confirm what the 'uv' tool and the 'uv sync' install step will do in your environment (it may pull or activate local code); (3) be aware the skill will persist the API key to ~/.openclaw/config/sparki.json and will read files under the current working directory and write outputs to ~/.openclaw/workspace/sparki/videos; (4) confirm the default base URL (agent-api.sparki.io) and Telegram upload link match the official Sparki endpoints you expect; and (5) if you need stronger isolation, run the tool in a controlled environment or sandbox rather than on a machine with sensitive data.Like a lobster shell, security has layers — review code before you run it.
captionvk97effv7474ha1p3gg0c113tms83eb21editingvk97effv7474ha1p3gg0c113tms83eb21latestvk97effv7474ha1p3gg0c113tms83eb21sparkivk97effv7474ha1p3gg0c113tms83eb21subtitlevk97effv7474ha1p3gg0c113tms83eb21videovk97effv7474ha1p3gg0c113tms83eb21zhvk97effv7474ha1p3gg0c113tms83eb21
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
OSmacOS · Linux
Binsuv
Primary envSPARKI_API_KEY