技能详情（站内镜像，无评论）
作者：sam1337 @0xs4m1337
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 7 · 5.3k · 41 current installs · 42 all-time installs
⭐ 7
安装量（当前） 42
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：0xs4m1337/demo-video
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code matches its stated purpose (automating Playwright/CDP recording and FFmpeg encoding) but there are several mismatches and operational risks (missing dependency details, broad local CDP access that can capture sensitive pages, and an in-memory frame buffer) that the user should be aware of before installing or running it.
目的
The name/description line up with the included scripts: record-demo.js uses Playwright CDP to capture frames and frames-to-video.sh uses FFmpeg to encode them. However SKILL.md/prereqs omit Node and the playwright dependency (script requires node + playwright-core), which is an inconsistency: either the skill should list those prerequisites or include an install step.
说明范围
Instructions are narrowly scoped to recording browser frames and encoding them. They do not instruct exfiltration. However the recorder connects to a local CDP endpoint (http://127.0.0.1:18800) and will capture whatever page is found by the script (default search for 'localhost' but configurable). That means it can record any browser tab accessible through that CDP endpoint (including potentially sensitive pages) — the SKILL.md does not explic…
安装机制
There is no install spec (instruction-only), so nothing is written automatically. But the runtime requires Node and a Playwright runtime (playwright-core) plus FFmpeg and a Clawdbot browser exposing a CDP endpoint. These runtime dependencies are not fully documented in SKILL.md (Node and npm packages are missing), which is an operational/consistency issue.
证书
The skill does not request environment variables, credentials, or external endpoints beyond a local CDP URL. No network credentials or unrelated secrets are requested. Note: the hardcoded cdpEndpoint (127.0.0.1:18800) implies access to a local browser instance — that is proportional for the stated purpose but gives the script the ability to access any pages the browser can see.
持久
always is false and there are no install actions that modify global agent configuration. The skill does not request persistent platform privileges. It runs as a discrete script invoked by the user/agent.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Demo Video Creator」。简介：Create product demo videos by automating browser interactions and capturing fra…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/0xs4m1337/demo-video/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。