Movie

Create films with AI video generation by managing scripts, prompts, consistency, and production workflows from concept to final cut.

This skill is a coherent set of production instructions (prompts, templates, ffmpeg commands, tool recommendations). Before using: ensure ffmpeg and any listed model/CLI tools are installed from trusted sources; do not supply API keys to unknown third-party tools without auditing their privacy/policy; follow the legal notes in commercial.md (do not generate identifiable people without consent; confirm music and brand rights); and be aware that the agent will read/write files under ~/movies/ if given filesystem access — limit that access to project folders and avoid exposing sensitive data.

Type: OpenClaw Skill Name: movie Version: 1.0.0 The skill bundle provides comprehensive documentation and examples for AI-driven video production, primarily using standard `ffmpeg` commands. However, the `tools.md` file includes an `ffmpeg` command for concatenating clips (`ffmpeg -f concat -safe 0 -i list.txt -c copy output.mp4`) which disables security checks for the input file list. This `safe 0` flag, while a legitimate `ffmpeg` option, introduces a vulnerability where a maliciously crafted `list.txt` (e.g., containing arbitrary file paths or shell commands if executed in an unsanitized environment) could lead to arbitrary file access or remote code execution. While there is no evidence of intentional malicious behavior, data exfiltration, or harmful prompt injection, this specific command represents a significant vulnerability risk, classifying the skill as 'suspicious' rather than 'benign'.