WaveSpeedAI Ultimate Video Upscaler

Upscale videos to 720p, 1080p, 2K, or 4K resolution using WaveSpeed AI's Ultimate Video Upscaler. Takes a video URL and produces a higher-resolution version....

What to check before installing: - Provenance: The skill lists no source or homepage. Verify that 'wavespeed.ai' is a legitimate service and that a published 'wavespeed' client/library exists from a trusted publisher. Prefer skills with a clear source and homepage. - API key: SKILL.md requires WAVESPEED_API_KEY but the registry metadata does not declare it. Treat this as a red flag: confirm that the skill will actually request an API key at runtime and that you trust the service before providing credentials. Do not paste your API key into chat or commit it into files; use secure environment/secret storage. - Local file access & privacy: Example code uploads local files (e.g., '/path/to/video.mp4'), meaning the agent or runtime would need to read and transmit video data to a third party. Only use this skill if you are comfortable uploading those videos to the external service (privacy, copyright, and cost implications). Validate any URLs before sending them. - Billing and limits: The SKILL.md includes pricing and minimum charges; confirm billing and quotas on the WaveSpeed side before use to avoid unexpected charges. - What would reduce risk: metadata updated to declare WAVESPEED_API_KEY as a required credential, a verifiable homepage/source repo, and explicit statements about required runtime permissions (file upload allowed or not). If those are provided and match the instructions, this assessment could move toward benign. If you cannot verify the service or do not want to expose local videos or an API key, do not install or invoke this skill.

Type: OpenClaw Skill Name: wavespeed-ultimate-video-upscaler Version: 1.0.0 The skill bundle provides documentation and code examples for a video upscaling service. It includes standard instructions for API key setup and usage, along with security best practices like input validation and secure API key storage. There is no evidence of prompt injection attempts against the AI agent, malicious code, data exfiltration, or unauthorized actions. The external domain `wavespeed.ai` is legitimately referenced for API key acquisition.