extract_experiment_data_from_video
General-purpose experimental data extractor from lab video streams. Ingests footage from XR headsets or fixed cameras and extracts typed, timestamped measurements — liquid volume levels, color/turbidity shifts, cell and colony counts, pipette readouts, instrument display values, gel band intensities — emitting a time-series JSON or CSV table ready for downstream analysis, charting, or ELN attachment.
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
This skill’s runtime ingests unstructured text derived from OCR of instrument displays and tube labels in the provided lab video/stream (e.g., `ocr_display` and `Tube / container label reading` read `raw_text`), which can include outsider-authored content (the video/labels) without first selecting a specific trusted item.
- Repository
- wu-yc/LabClaw
- Commit
df37802
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.