Renderful AI

Generate images and videos via renderful.ai API (FLUX, Kling, Sora, WAN, etc.) with crypto payments. Use when the user wants to create AI images, videos, or needs a crypto-friendly generation service. Triggers: renderful, renderful.ai, generate image, generate video, crypto payment generation

The skill appears to do what it says (call renderful.ai to make images/videos) but the SKILL.md asks you to provide an API key and—optionally—an agent-held crypto wallet that lets the agent pay autonomously. Before installing: 1) Verify the skill's origin (there's no homepage/source listed). 2) Do not place a funded wallet (private key or wallet credential) in global agent env vars unless you fully trust the skill and platform; prefer a limited-spend or empty wallet. 3) Prefer manual approval for payments (do not set RENDERFUL_PREFER_X402=true or agent wallet env) unless you intend autonomous payments. 4) Create a dedicated renderful API key you can revoke, and monitor usage/transactions. 5) Ask the publisher to update registry metadata to declare required env vars explicitly. If you cannot verify the author or do not accept autonomous payments, consider not installing or using the skill without modifying its behavior to require human confirmation for any payment flow.

Type: OpenClaw Skill Name: renderful-ai Version: 1.0.0 The skill bundle is benign. It clearly defines its purpose to interact with the renderful.ai API for image/video generation, explicitly declares the use of `Bash(curl)` and `Web(fetch)` tools, and all network calls are directed to the stated `api.renderful.ai` domain. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent to perform actions beyond the stated purpose in `SKILL.md`.