📦 Concentration Analysis Skill | 专注度分析技能 — 技能工具
v1.0.0Real-time detection of gaze direction and facial pose to quantify states of focus, distraction, or mind-wandering. Suitable for scenarios such as classroom l...
0· 1·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
high confidenceThe skill's description (focus analysis) is plausible, but the package and runtime instructions are internally inconsistent: it includes many code modules and persistent storage behavior, expects config files/env values, and performs network calls despite declaring no required config/credentials or install steps — you should review and sandbox it before use.
评估建议
This skill contains real code (not just prose) and will read config files, write a local SQLite DB under the agent workspace, save uploaded video attachments to disk, and make network API calls to external service URLs defined in its configs. Yet the registry metadata declares no required config paths, env vars, or install steps — that mismatch is a red flag. Before installing or running: (1) inspect or replace the skills/smyx_common/scripts/config.yaml and any workspace config to ensure endpoin...详细分析 ▾
ℹ 用途与能力
The stated purpose (gaze/face-based focus analysis) matches the presence of face_analysis and focus_analysis code. However the repository also contains broad, generic 'smyx_common' platform code (DB/DAO, many scene codes, pet/health references) that is not strictly necessary for a single focus-analysis skill. Metadata declares no required config paths or credentials but the runtime expects config files (skills/smyx_common/scripts/config.yaml and workspace-level config) and may use API keys — this mismatch is unexpected.
⚠ 指令范围
SKILL.md forces a strict open-id retrieval flow that reads config files under the skill and workspace. It also mandates automatically saving uploaded attachments into an attachments directory. The doc forbids reading local 'memory' files, but code reads config YAMLs and the package contains a local SQLite DAO that writes to workspace/data — so the instructions and code contradict each other on local data access. The skill also instructs calling cloud APIs and to build Markdown links from JSON reportImageUrl fields, which implies transmitting user video or metadata to external endpoints.
⚠ 安装机制
Registry metadata lists no install spec (instruction-only), but the package includes many Python modules and requirements.txt files (skills/smyx_common and skills/face_analysis) with dozens of dependencies. There is no declared installation mechanism to ensure those dependencies are present — this is an inconsistency that may lead to hidden dependency installation later or runtime failures. No externally downloaded installers were detected in the manifest.
⚠ 凭证需求
Declared required env vars/config paths: none. In reality, code reads environment variables (OPENCLAW_WORKSPACE, OPENCLAW_SENDER_OPEN_ID, OPENCLAW_SENDER_USERNAME, FEISHU_OPEN_ID) and tries to read config YAMLs under skills/smyx_common/scripts/config.yaml (and workspace-level config). The skill also relies on API endpoints and optional API keys (ApiEnum/API_KEY). Asking for open-id (username/phone) as required input and reading workspace config without declaring these requirements is disproportionate and opaque.
⚠ 持久化与权限
The code includes a local DAO that creates and writes an SQLite database under a workspace data path and the SKILL.md specifies saving uploaded attachments to disk. The skill will therefore persist user-supplied videos and create local DB records. Although 'always' is false and the skill isn't forced on all agents, the persistence behavior and workspace-level file writes are significant and weren't declared in the metadata or the instruction preamble.
⚠ skills/smyx_common/scripts/config-dev.yaml:2
Install source points to URL shortener or raw IP.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
Initial release of smyx-focus-analysis skill for real-time concentration analysis. - Provides real-time detection of gaze direction and facial pose to quantify focus, distraction, or mind-wandering states. - Supports structured concentration analysis reports for scenarios including classroom learning, office meetings, and driving attention monitoring. - Enforces strict open-id acquisition and mandatory use of cloud API for all historical report queries; strictly forbids local memory file usage. - Triggers automatically on relevant keywords or video uploads, managing attachments and ensuring correct analysis/report viewing workflow. - Outputs reports in Markdown table format, with clickable report links for easy viewing.
● 可疑
安装命令
点击复制官方npx clawhub@latest install smyx-focus-analysis
镜像加速npx clawhub@latest install smyx-focus-analysis --registry https://cn.longxiaskill.com镜像同步中