Byted Airesearch Videoeval
v1.0.0Create and check long-running video material evaluation tasks. Use this skill when the user wants to submit videos for evaluation, check an existing video ev...
⭐ 0· 66·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and SKILL.md: scripts upload MP4 files (<=50MB) to https://console.volcengine.com and create/list/get evaluation tasks. There are no unrelated env vars, binaries, or endpoints requested. (Minor note: package metadata lists no homepage/source, so provenance is unknown but that does not make the functionality incoherent.)
Instruction Scope
SKILL.md and code confine behavior to: validate local files, read files from disk, upload them to the documented upload endpoint only when invoked as part of task creation, and query task endpoints. The upload helper is intended as internal-only and the orchestration script is the primary entrypoint. The only file access is reading specified local MP4 files; there are no instructions to read arbitrary user data or unrelated system files. (Note: the internal-use marker is a fixed string constant; it prevents accidental direct use but is not a strong security boundary.)
Install Mechanism
No install spec; the skill is instruction/code-only and does not download or install external artifacts. This minimizes installation surface and is appropriate for the described scripts.
Credentials
Only credential needed is an API key for the Volcengine/Byted AI Research service (resolved via --api-key or BYTED_AIRESEARCH_VIDEOEVAL_API_KEY). This is proportional to the functionality (authenticated uploads and task creation). No unrelated secrets or system config paths are requested.
Persistence & Privilege
Skill does not request persistent 'always' inclusion and does not modify agent/system settings. It runs on demand and requires explicit API key input; autonomous invocation is allowed by platform default but not combined with other risky privileges.
Assessment
This skill appears to do exactly what it claims: validate local MP4 files, upload them to Volcengine (console.volcengine.com), and create or query long-running evaluation tasks. Before installing or running it: 1) Only provide an API key that you trust for this service — check what permissions that key has in your Volcengine console; 2) Confirm you intend to upload the specific local files (each upload reads the file and transmits it to the remote endpoint); 3) Be aware the upload helper enforces an internal-use marker via a hard-coded token (security-by-obscurity) — do not treat that as a robust access control; 4) Because repository homepage/source is not provided, consider verifying the origin or comparing these scripts to an official SDK/docs if you need stronger provenance guarantees. If any of these are unacceptable, do not install or run the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97dnm435n62h0nvemadxamg1d83ma99
License
MIT-0
Free to use, modify, and redistribute. No attribution required.