gnview-script-extraction

What to consider before installing: - The script uploads your local MP4s to VolcEngine ARK (ark.cn-beijing.volces.com). Only install if you are comfortable sending those videos to that third-party service and its privacy policy. - The SKILL.md and script require an ARK API key, but the registry metadata does not declare this — the metadata should be updated. Treat this as a warning sign and prefer skills that declare required credentials explicitly. - The examples pass the API key as a CLI argument. That can expose the key via process listings (ps) or shell history. Prefer using a secure method (environment variable or a protected config file) and avoid pasting secrets on the command line. - Verify the endpoint and owner independently (homepage/source are missing). If you cannot confirm the skill author or the endpoint's legitimacy, avoid uploading sensitive videos. - The code appears straightforward (no obfuscated code) and performs only the described upload/analysis calls, but because the source and registry metadata are incomplete, proceed cautiously. If you need this functionality, ask the author to: (1) declare ARK_API_KEY in the skill metadata, (2) provide a homepage/source link, and (3) update instructions to accept credentials securely (env var or config) rather than as CLI args.