📦 AIOZ Stream Skill — AIOZ 分布式流媒体管理
v1.0.2通过 AIOZ Stream API，管理视频、音频、播放列表、播放器、Webhook、分析、支付、章节和字幕。支持分布式流媒体平台的各种操作，包括媒体上传、元数据管理、播放器自定义、分析查询等。
0· 172·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidence该技能仅请求 AIOZ Stream API 密钥对，用于 API 调用，无不相关的安装或凭证请求，内部一致性良好。
评估建议
该技能诚实实现了 AIOZ Stream API 集成，只请求必要的公钥/私钥。使用前请确保平台安全处理密钥，考虑使用短期或有限作用域密钥，确认信任 API 端点和技能源。...详细分析 ▾
✓ 用途与能力
Name/description match the runtime instructions: all API calls target the AIOZ Stream base URL and the skill requests the AIOZ public/secret key pair needed for that API. There are no unrelated binaries, environment variables, or config paths requested.
ℹ 指令范围
The SKILL.md is prescriptive about collecting the user's public and secret keys, storing them in-session as $AIOZ_PUBLIC_KEY and $AIOZ_SECRET_KEY, and using them as headers for curl calls. It also enforces strict messaging/templates for uploads and webhook handling. This stays within the skill's scope but does involve collection and in-session storage of sensitive secrets—the skill does not specify how long those keys are retained or how they are protected by the host platform.
✓ 安装机制
Instruction-only skill with no install spec and no code files. This minimizes the risk of arbitrary code being written to disk or executed by an installer.
ℹ 凭证需求
No declared environment variables are required by the registry, but the runtime instructions explicitly collect two sensitive credentials (public and secret keys). Those are proportional to the described API integration, but collecting secret keys is sensitive—confirm that the hosting platform treats these inputs as secrets (not logged or stored persistently) before proceeding.
✓ 持久化与权限
The skill is not marked always:true, does not request system-level config changes, and has no install-time persistence. It only instructs the agent to hold credentials in session for the duration of the interaction.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/16
v1.0.2 更新：添加强制凭证收集、清除环境变量引用、clarify 认证流程、更新 API 端点 URL、保留原始 Webhook 和上传进度响应模板。
● 无害
安装命令
点击复制官方npx clawhub@latest install aioz-stream-skill
镜像加速npx clawhub@latest install aioz-stream-skill --registry https://cn.longxiaskill.com
技能文档
与 AIOZ Stream API — 一个 Web3 分布式流媒体平台 — 通过用户的 API 密钥对交互。...
（注意： 代码块、命令行指令和 Markdown 格式保持不变，仅翻译了非代码部分）