24-hour news is automatically generated into AI videos and can be published with one click, provided by the Vidu API.

Automatically publish videos to Xiaohongshu, Douyin, WeChat Channels, and Kuaishou with platform-tailored titles and tags via browser automation.

Key points before installing: - The skill advertises 'Vidu API' and automated AI video generation but the code only automates a browser to upload existing local videos; if you expected an API-based or auto-generation pipeline, this skill does not provide it. Ask the author for clarification or an updated README. - The package uses Playwright but provides no install instructions or dependency declarations; you will need to install python-playwright and browser binaries yourself. Prefer running this in an isolated environment or VM to limit risk. - The scripts will access local video files you provide and reuse browser_state.json (cookies/auth). Do not point it at videos or browser state from accounts with sensitive access. Inspect browser_state.json contents before reuse and avoid sharing it. - The tool requires you to be logged into target platforms (it may prompt for manual login). Be aware of platform terms of service and content-moderation risk when publishing sensitive material (e.g., political/military news). - If you want to proceed, request from the publisher: (1) a clear install spec (requirements.txt or install script), (2) confirmation whether any external Vidu API exists and its endpoint/auth, and (3) assurance about how browser_state.json is used/saved. If those are not provided, treat the package as untrusted and run only in an isolated test environment.

Type: OpenClaw Skill Name: vidu-video-publisher Version: 1.0.1 The bundle provides a video publishing tool that utilizes Playwright for browser automation on platforms like Xiaohongshu, Douyin, and Kuaishou. It is classified as suspicious due to high-risk capabilities that are plausibly needed for its stated purpose but lack robust security controls, specifically the automated control of browser sessions and the storage of sensitive authentication states in a local file ('browser_state.json' in scripts/browser_publisher.py). Additionally, the tool uses subprocess execution to coordinate between scripts (scripts/interactive_publish.py), which, while implemented using argument lists, remains a sensitive capability in an agent-led environment.