by 安全扫描
OpenClaw
安全
high confidenceThe skill's requests and instructions are internally consistent with an ecommerce video assistant: it requires no credentials, has no install or code, and its SKILL.md is descriptive of the advertised capabilities.
评估建议
This skill appears coherent and low-risk from the metadata: it is an instruction-only description of an ecommerce video assistant and requests no secrets or installs. However the SKILL.md does not state where images/text are processed or stored. Before using, confirm where your product images and listing text will be sent (local processing vs an external MediaClaw service) and review that service's privacy/retention policy. Avoid uploading sensitive customer data or personally identifying inform...详细分析 ▾
✓ 用途与能力
The skill claims to convert product images and listings into videos and does not request unrelated resources (no env vars, no binaries, no config paths). The README mentions MediaClaw and an install command for the hub, which is consistent with a distribution note rather than hidden behavior.
ℹ 指令范围
SKILL.md is high-level and describes capabilities and example prompts but does not include runtime commands, file paths, or explicit data-exfiltration steps. It also does not specify how or where heavy processing occurs (local vs. external API). Because implementation is unspecified, the agent may need to send uploaded images or text to an external service — the SKILL.md doesn't document privacy, retention, or endpoint behavior.
✓ 安装机制
No install spec, no code files, and no downloads are present. This is instruction-only, so nothing will be written to disk by an installer and there are no suspicious install URLs.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. No disproportionate access to secrets or unrelated services is asked for by the skill metadata or SKILL.md.
✓ 持久化与权限
always:false and user-invocable:true. The skill does not request permanent presence or elevated privileges, and there is no indication it will modify other skills or system settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/3/26
- Added a name and description block to SKILL.md for improved clarity and discovery. - Description now includes Chinese keywords for broader accessibility (电商视频、商品短视频、产品展示、带货素材). - No changes to core features or usage instructions.
● 无害
安装命令
点击复制官方npx clawhub@latest install ecommerce-video-ai
镜像加速npx clawhub@latest install ecommerce-video-ai --registry https://cn.longxiaskill.com