ClawHub

Baidu Netdisk AIVideoNotes

v1.0.1

Generate AI-powered notes from videos (document, outline, or graphic-text formats)

⭐ 0· 183·0 current·0 all-time
by@ide-rea
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe generating notes from videos via Baidu Netdisk AI. The only requested binary (python3) and the single required env var (BAIDU_API_KEY) are consistent with calling Baidu APIs from the included Python scripts. Endpoints used (qianfan.baidubce.com/v2/tools/ai_note/...) match the stated purpose.
✓
Instruction Scope
SKILL.md limits runtime actions to creating a task, polling, and querying results using the provided scripts. The scripts only read BAIDU_API_KEY from the environment, accept user-provided video URLs or task IDs as CLI args, call the Baidu endpoints, and print JSON to stdout. There are no instructions to read unrelated files, shell history, or other environment variables.
✓
Install Mechanism
There is no install spec (instruction-only packaging plus included Python scripts). That keeps risk low—nothing is downloaded or executed from third-party URLs during install. The package requires requests and python3 at runtime (requests is used in the scripts), which is expected for these scripts.
✓
Credentials
The skill requires exactly one credential: BAIDU_API_KEY. That is proportionate for a skill that authenticates to Baidu's API. The scripts only read BAIDU_API_KEY and no other secrets. The primaryEnv matches the env var used by the code.
✓
Persistence & Privilege
The skill does not request permanent presence (always: false) and does not attempt to modify agent/system configuration. It only runs on user invocation or normal autonomous invocation, which is expected for a service integration skill.
Assessment
This package appears coherent and limited to calling Baidu's ai_note endpoints. Before installing, consider: (1) BAIDU_API_KEY will be sent to qianfan.baidubce.com—only provide a key with minimal privileges and avoid reusing highly privileged or long-lived secrets. (2) The tool will transmit the video URL (and possibly metadata) to Baidu; do not submit sensitive or private URLs you don't want processed by an external service. (3) The skill source/homepage is unknown—if you require a provenance guarantee, request a verified source or review the included scripts yourself (they are short and readable). (4) Run in a sandbox or with an ephemeral API key if you want to limit blast radius. Overall, the package is internally consistent with its described purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dsszy1t0cn1b81jty9wvf0d84123w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📺 Clawdis
Binspython3
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY

Comments