wanjie-openclaw-video

Automatically generate Veo videos via natural language commands with background monitoring, dependency handling, and timeout recovery features.

This skill launches a detached Python worker that reads your OpenClaw config (~/.openclaw/openclaw.json) to extract an API key and then sends requests to https://maas-openapi.wanjiedata.com. Before installing, consider: (1) Are you comfortable with your OpenClaw API key being read and used to call this external domain? The manifest did not explicitly declare that behavior. (2) The README/SKILL.md promises periodic monitoring and a Windows scheduled task, but the code does not create such a scheduler — expect only per-invocation background jobs. (3) hooks.js spawns veo_worker.py directly (it does not run the helper that auto-installs dependencies), so ensure Python and 'requests' are available or the worker may fail. (4) Because the skill spawns detached processes that can run independently and open URLs on your machine, test it in an isolated environment (or inspect/modify code) and verify the remote endpoint (wanjiedata domain) and its privacy policy before trusting your API key. If you proceed, consider editing the code to (a) require explicit user confirmation before reading/sending the API key, (b) add logging/consent for network calls, and (c) ensure dependency installation is invoked in the hook path or handled at install time.

Type: OpenClaw Skill Name: wanjie-openclaw-video-v2-0 Version: 2.0.0 The skill exhibits high-risk behaviors including reading the user's global OpenClaw configuration file (~/.openclaw/openclaw.json) to extract API keys and automatically executing shell commands to install Python dependencies via pip (video_interface.py). Most significantly, the documentation in SKILL.md claims the skill deploys a persistent Windows Task Scheduler entry ('OpenClaw_Veo_Monitor') for background monitoring; while the provided code implements a detached background process (hooks.js), the explicit mention of system-level persistence without clear user opt-in or visible implementation logic is a major red flag.