← Back to Skills Marketplace
Prep Video
by
ScottEverduim
· GitHub ↗
· v1.0.0
354
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install prep-video
Description
Prepares a video by verifying all required assets from a script on Google Drive and triggers generation or reports missing files.
Usage Guidance
Do not install blindly. Specific things to ask or fix before using: (1) Remove the hard-coded Telegram BOT_TOKEN/CHAT_ID from the script — treat that string as a secret and provide it via a documented environment variable or secure config; if that token is real, rotate it immediately. (2) Update SKILL.md and metadata to declare required binaries (rclone, jq) and the need for an rclone remote configured for Google Drive, or provide setup steps. (3) Explain and/or avoid executing the pipeline script at ~/.openclaw-workspace/skills/aura-video/scripts/aura_video.sh; instead let users explicitly provide the path or require confirmation — review that pipeline script thoroughly before allowing execution. (4) Confirm what information is sent to Telegram (paths, IDs, etc.) and whether that is acceptable for your environment. If the author cannot justify these choices or remove embedded credentials, treat the skill as unsafe to install.
Capability Analysis
Type: OpenClaw Skill
Name: prep-video
Version: 1.0.0
The script 'scripts/prep_video.sh' contains a hardcoded Telegram Bot Token (8501038356:AAHhhywqpA97okbyEsxXmdQYuJXi848Tm3g) and a specific Chat ID (1835871910) used to send status updates. This configuration exfiltrates metadata, including video titles and script IDs, to a third-party Telegram account rather than providing feedback directly to the OpenClaw user. While this implements the 'notification' feature mentioned in 'SKILL.md', the hardcoded recipient makes it a privacy risk and a 'phone home' mechanism.
Capability Assessment
Purpose & Capability
The description says it verifies Drive assets and triggers generation, which is coherent, but the bundled script requires rclone and jq (hard-coded paths), relies on an rclone remote name (manus_google_drive) and a pipeline script in ~/.openclaw-workspace/skills/aura-video — none of these requirements are declared in the skill metadata or SKILL.md. The need to execute another skill's pipeline script is unexpected and requires explicit justification.
Instruction Scope
SKILL.md describes downloading/parsing a JSON and checking Drive assets but does not mention using Telegram for notifications nor the exact mechanism for accessing Google Drive. The included script sends messages to Telegram, uses rclone to access Drive, and executes an external pipeline script; these actions are not documented in the runtime instructions and therefore expand scope beyond what the SKILL.md describes.
Install Mechanism
There is no install spec (instruction-only), which keeps on-disk changes minimal, but the script presumes /usr/local/bin/rclone and /usr/local/bin/jq exist and that an rclone remote (manus_google_drive) is configured. Those runtime dependencies should be declared so users know what will be required.
Credentials
The skill metadata declares no secrets or env vars, yet the script contains a hard-coded Telegram BOT_TOKEN and CHAT_ID and depends on an rclone remote (which implies Drive credentials stored in rclone config). Hard-coded credentials in code are a sensitive mismatch and the skill transmits information to an external endpoint (api.telegram.org).
Persistence & Privilege
The skill does not request always:true, but it executes a pipeline script located in another skill's workspace (~/.openclaw-workspace/skills/aura-video/scripts/aura_video.sh). Running that other script can execute arbitrary code with the agent's user privileges. Autonomous invocation combined with the hard-coded external-notification token increases the blast radius compared with a self-contained check.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install prep-video - After installation, invoke the skill by name or use
/prep-video - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of prep-video skill:
- Adds /prep-video <script_id> command to prepare videos.
- Downloads and parses the video script JSON from Google Drive.
- Checks for existence of required assets (voiceover and A-roll clips).
- Confirms readiness or reports missing assets with file locations.
- Triggers video generation if all assets are present.
Metadata
Frequently Asked Questions
What is Prep Video?
Prepares a video by verifying all required assets from a script on Google Drive and triggers generation or reports missing files. It is an AI Agent Skill for Claude Code / OpenClaw, with 354 downloads so far.
How do I install Prep Video?
Run "/install prep-video" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Prep Video free?
Yes, Prep Video is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Prep Video support?
Prep Video is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Prep Video?
It is built and maintained by ScottEverduim (@scotteverduim); the current version is v1.0.0.
More Skills