← Back to Skills Marketplace
wondershare-boop

Tomoviee Image to Video

by wondershare-boop · GitHub ↗ · v1.0.3 · MIT-0
cross-platform ⚠ suspicious
373
Downloads
0
Stars
0
Active Installs
4
Versions
Install in OpenClaw
/install tomoviee-image-to-video
Description
Generate videos from image + text prompts using Tomoviee Image-to-Video API (`tm_img2video_b`) through Wondershare OpenAPI gateway (`https://openapi.wondersh...
Usage Guidance
This package mostly does what it claims, but there are some red flags to resolve before installing: (1) the manifest does not declare the required credentials (app_key/app_secret) — ask the publisher to add them as required env vars or document how credentials will be provided securely; (2) avoid running scripts that print tokens (scripts/generate_auth_token.py) in environments where stdout is logged or shared; treat the app_key/app_secret as sensitive and inject them via a secure secret mechanism rather than pasting into chat; (3) be cautious with the optional callback URL — only use trusted endpoints because the service can POST generated results (and potentially user-supplied images/prompts) to that URL; (4) verify you trust the external gateway (openapi.wondershare.cc) and review its data retention/privacy policy because your images/prompts will be sent to a third party. If the author can correct the manifest to declare the credentials and avoid helper scripts that print secrets, my confidence that this package is coherent would increase.
Capability Analysis
Type: OpenClaw Skill Name: tomoviee-image-to-video Version: 1.0.3 The skill bundle is a legitimate integration for the Tomoviee AI Image-to-Video service provided by Wondershare. The Python client (scripts/tomoviee_img2video_client.py) and authentication helper (scripts/generate_auth_token.py) perform standard API interactions with the documented endpoints at openapi.wondershare.cc. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code logic is transparent and aligns with the stated purpose of generating videos from images.
Capability Assessment
Purpose & Capability
The code and SKILL.md consistently implement a Tomoviee image-to-video client that talks to the documented Wondershare gateway; the runtime dependency (requests) and included scripts are appropriate for that purpose. However the registry metadata/manifest lists no required environment variables or primary credential even though SKILL.md and the client require app_key and app_secret — this mismatch is incoherent and unexpected.
Instruction Scope
Runtime instructions are narrowly scoped to creating tasks, polling results, and optionally using a callback URL. They only target the documented openapi.wondershare.cc endpoints. Concerns: (1) SKILL.md and scripts rely on app_key/app_secret but the manifest does not declare them; (2) scripts/generate_auth_token.py prints the base64 token to stdout (could be logged); (3) the optional callback parameter means results can be POSTed to arbitrary URLs, which could leak generated content or metadata if misused.
Install Mechanism
No remote downloads or obscure installers are used. The package includes a simple requirements.txt (requests) and instructs users to pip install -r requirements.txt — this is proportionate and low risk compared to download-based installs.
Credentials
The API legitimately requires app_key and app_secret (used to build Basic <base64(...)> Authorization headers). That is proportionate to the stated purpose, but the skill metadata declares no required env vars or primary credential — a manifest omission. Additional notes: base64 encoding is reversible (not encryption); generate_auth_token prints the token, increasing chance of accidental exposure; no other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not include persistent install steps. It runs as a client of the external API and does not install background services or system-wide changes.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install tomoviee-image-to-video
  3. After installation, invoke the skill by name or use /tomoviee-image-to-video
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.3
- Added requirements.txt specifying dependency on requests>=2.31.0,<3.0.0. - Added scripts/tomoviee_image_to_video_client.py as a Python API client. - Comprehensive SKILL.md rewrite: clarified API endpoints, authentication, credential handling, workflow, supported parameters, and file/resource structure. - Updated client usage instructions and introduced clear async workflow documentation. - Improved provider, endpoint provenance, and security guidance. - Listed references and documentation resources for API and prompt/camera options.
v1.0.2
- Added _meta.json file to the project. - Added Python bytecode cache file for tomoviee_img2video_client.py. - No functional or documentation changes to the skill behavior.
v1.0.1
- Updated external resource links from tomoviee.cn to tomoviee.ai for the Developer Portal and API Documentation. - No functional or API changes.
v1.0.0
- Initial release of tomoviee-img2video skill. - Generate videos from static images and text prompts, adding motion and camera movements. - Supports a variety of image formats (JPG, JPEG, PNG, WEBP) and multiple resolutions/aspect ratios. - Includes Python client and authentication tools for easy integration. - Refer to bundled scripts and external documentation for usage and API details.
Metadata
Slug tomoviee-image-to-video
Version 1.0.3
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 4
Frequently Asked Questions

What is Tomoviee Image to Video?

Generate videos from image + text prompts using Tomoviee Image-to-Video API (`tm_img2video_b`) through Wondershare OpenAPI gateway (`https://openapi.wondersh... It is an AI Agent Skill for Claude Code / OpenClaw, with 373 downloads so far.

How do I install Tomoviee Image to Video?

Run "/install tomoviee-image-to-video" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Tomoviee Image to Video free?

Yes, Tomoviee Image to Video is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Tomoviee Image to Video support?

Tomoviee Image to Video is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Tomoviee Image to Video?

It is built and maintained by wondershare-boop (@wondershare-boop); the current version is v1.0.3.

💬 Comments