A skill that automates repurposing Chinese social videos (Douyin/Bilibili/Xiaohongshu) to international platforms (TikTok/YouTube/Instagram) via the Lumi API — handling translation, AI dubbing, and publishing in one workflow.
v1.0.0Use this skill when the user wants to manage social media content via Lumi — uploading videos, publishing to TikTok/YouTube/Instagram, translating or dubbing...
⭐ 1· 132·0 current·0 all-time
byjefferyjiang@jeffery1995
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (repurpose Chinese social videos → TikTok/YouTube/Instagram with translation/dubbing) match the included OpenAPI references and the single required env var LUMI_API_KEY. The declared API surface (videos, repurpose, localization, tts, social-posts, connections, insights) fits the described functionality.
Instruction Scope
SKILL.md confines runtime actions to reading the bundled README and selected OpenAPI JSON files and to making network requests to https://lumipath.cn using the LUMI_API_KEY. That is appropriately scoped. Two points to note: (1) the skill enforces an "autoPublish default enabled" behavior for repurpose when a publish platform is provided — this can result in immediate publishing if the user provides platform and caption values; and (2) the README recommends exporting LUMI_BASE_URL but the main instructions hardcode https://lumipath.cn, which is a minor inconsistency (not a data-exfiltration risk but could surprise users).
Install Mechanism
This is an instruction-only skill with no install spec and no bundled executable code, so there is no installer risk (nothing is written to disk by an install step).
Credentials
The skill requires only one credential (LUMI_API_KEY) and declares it as the primary credential — this is proportional to the described API interactions. Minor inconsistency: README examples mention a LUMI_BASE_URL env var that is not declared in requires.env (the skill otherwise uses the fixed base URL https://lumipath.cn).
Persistence & Privilege
always is false and the skill does not request persistent system privileges or modify other skills. Autonomous invocation is allowed (default) but is not combined with broad or unrelated credential access, so no elevated persistence concern here.
Assessment
This skill appears to do what it says: it will call Lumi's endpoints using the LUMI_API_KEY you provide. Before enabling it on real accounts: (1) Only provide an API key you trust and that is scoped appropriately — create a test account/key if possible. (2) Be aware the repurpose workflow defaults to auto-publishing when platforms are specified; confirm the skill will not publish to your live accounts unexpectedly (consider testing with a sandbox/test account or ensuring you provide only non-production connectionIds). (3) The README mentions a LUMI_BASE_URL env variable but the skill uses https://lumipath.cn — verify the URL and provider authenticity. (4) This tool facilitates reposting content from other platforms; ensure you have the right to republish any content (copyright/terms risk). If you need a higher assurance, request the skill author/source provenance or an install spec from a trusted registry before use.Like a lobster shell, security has layers — review code before you run it.
latestvk97fj008jn6g0am2mbtr4mqzdd839m6z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvLUMI_API_KEY
Primary envLUMI_API_KEY
