← Back to Skills Marketplace
rainlin10

zxcvbnm-mnbvcxz

by Rainlin10 · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
140
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zxcvbnm-mnbvcxz
Description
Executes AIVideoMaker API workflows for text-to-video and image-to-video generation, including task creation, status polling, task details retrieval, and can...
Usage Guidance
This package's code implements the AIVideoMaker API and appears to only use the AIVIDEO_API_KEY to call the vendor's endpoints, which is consistent with its advertised functionality. However, before installing: 1) Verify origin — the published skill name (zxcvbnm-mnbvcxz) and registry metadata do not match internal filenames and manifest (aivideo-api-executor) and versions differ; this could be an accidental mispackaging or a sign it was republished under a different name. 2) Confirm you trust the owner/source (no homepage is provided). 3) Review the included JS files yourself (they're short and readable) or ask the publisher to explain the metadata mismatches. 4) Provide only a scoped API key, rotate it if you decide to install, and monitor usage. 5) Be aware of the Node runtime expectation (code uses fetch — ensure Node version supports global fetch or supply a compatible runtime). If you cannot verify the origin or the metadata inconsistencies are unexplained, avoid installing.
Capability Analysis
Type: OpenClaw Skill Name: zxcvbnm-mnbvcxz Version: 1.0.1 The skill bundle is a standard API wrapper for the AIVideoMaker service. It includes robust input validation in 'scripts/contract.mjs', safe logging practices that redact API keys in 'scripts/aivideo-client.mjs', and a well-structured workflow in 'scripts/run-workflow.mjs'. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all network activity is directed to the legitimate service domain (aivideomaker.ai).
Capability Assessment
Purpose & Capability
The implementation (scripts/*, references/*, contract validation) clearly implements an AIVideoMaker API workflow and only requires an AIVIDEO_API_KEY and node. That capability is coherent with the described purpose. However, the published skill name (zxcvbnm-mnbvcxz) and registry metadata do not match internal filenames/_meta.json/manifest (aivideo-api-executor), and the registry version (1.0.1) differs from package version (1.0.12). These metadata mismatches are unexpected and reduce trust.
Instruction Scope
SKILL.md and the scripts restrict actions to: accept CLI payload, validate payload, and call the AIVideoMaker API endpoints (baseUrl defaults to https://aivideomaker.ai). The code reads only process.env.AIVIDEO_API_KEY and CLI args; it does not read arbitrary host files or other env vars. Logging masks headers and strips headers from log output. No evidence of data exfiltration to unexpected endpoints.
Install Mechanism
There is no installer that downloads remote code; the package includes local JS files only (low install risk). No external archives or obscure URLs are fetched during install. Note: package.json requires node but the package lists engines >=14; the code uses fetch which may require Node >=18 to work as-is—this is a runtime compatibility issue, not a direct security problem.
Credentials
The only required secret is AIVIDEO_API_KEY (declared in several places). Optional env variables (AIVIDEO_TIMEOUT_MS, AIVIDEO_MAX_RETRIES) are reasonable. One inconsistency: top-level 'Requirements' summary said 'required binaries: none' but SKILL.md and clawhub.manifest.json declare node as required. Primary credential was missing in the initial registry summary but present in manifest — small inconsistencies that should be reconciled.
Persistence & Privilege
always:false and model invocation not disabled (platform default). The skill does not request persistent system privileges, does not modify other skills, and does not require system config-path access.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install zxcvbnm-mnbvcxz
  3. After installation, invoke the skill by name or use /zxcvbnm-mnbvcxz
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
- Removed example input and smoke test script files, reducing bundled samples and testing code. - No changes to skill functionality or API—core execution workflow remains the same. - Updated documentation with improved action definitions, security practices, and required environment metadata.
Metadata
Slug zxcvbnm-mnbvcxz
Version 1.0.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is zxcvbnm-mnbvcxz?

Executes AIVideoMaker API workflows for text-to-video and image-to-video generation, including task creation, status polling, task details retrieval, and can... It is an AI Agent Skill for Claude Code / OpenClaw, with 140 downloads so far.

How do I install zxcvbnm-mnbvcxz?

Run "/install zxcvbnm-mnbvcxz" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is zxcvbnm-mnbvcxz free?

Yes, zxcvbnm-mnbvcxz is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does zxcvbnm-mnbvcxz support?

zxcvbnm-mnbvcxz is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created zxcvbnm-mnbvcxz?

It is built and maintained by Rainlin10 (@rainlin10); the current version is v1.0.1.

💬 Comments