remotion-bozo

快速创建 Remotion 视频项目的技能。提供完整的项目模板、动画工具函数、渲染脚本和最佳实践。一键创建专业视频项目。

This package appears to be a straightforward Remotion project template and helper docs, but it has a few practical issues you should consider before running anything: - The README/SKILL.md tells you to run a `remotion-bozo` command but the repo only includes create-video.sh (no installed CLI). You may need to run the script directly (./create-video.sh) or wire up a wrapper — the mismatch is not malicious but is confusing. - create-video.sh runs npm install and writes files into your current directory. Review the script, run it in an isolated directory, and inspect generated package.json before running npm install. - The script uses sed -i '' (BSD/macOS syntax). On Linux that sed invocation will fail; expect portability issues if you run on Linux. - The docs include optional Lambda render instructions that require AWS credentials (AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY). The skill metadata does not declare these env vars — only set them if you intend to use Lambda and understand the security implications of providing AWS credentials. - The chrome-reuse guidance asks you to edit ~/.zshrc to set REMOTION_BROWSER_EXECUTABLE. That is convenient but it persists a setting; back up your shell config before changing it. If you don't trust the source: inspect all files locally, run the create script in an empty sandbox/container, or recreate the template manually following the docs rather than running scripts from an unknown origin.

Type: OpenClaw Skill Name: remotion-bozo Version: 1.0.0 The remotion-bozo skill bundle is a legitimate toolset for scaffolding and managing Remotion video projects. The core logic in 'create-video.sh' automates standard project initialization tasks like directory creation, dependency installation (remotion, react), and template generation without any hidden or harmful side effects. The documentation, particularly 'rules/chrome-reuse.md', provides helpful performance optimizations for reusing existing browser binaries, and no evidence of data exfiltration, malicious execution, or prompt injection was found.