Video Generator

AI video production workflow using Remotion. Use when creating videos, short films, commercials, or motion graphics. Triggers on requests to make promotional...

This skill generally does what it advertises (scaffold Remotion projects and scrape brand assets), but there are important caveats you should review before installing: - Scripts require command-line tools not declared in the manifest (curl, python3, sed, npm/npx). Ensure your environment provides these or the scripts will fail. - firecrawl.sh sources .env files from the workspace root and the skill dir. That will export any variables found there into the script's environment — review those .env files first and avoid running in a workspace that contains other secrets you don't want touched. - The skill instructs exposing a local dev server via a Cloudflare tunnel script at skills/cloudflare-tunnel/scripts/tunnel.sh which is not included here. Verify the existence and trustworthiness of that tunnel script before following that step, since exposing the dev server will make your project files publicly reachable. - The skill will fetch and save images from arbitrary scraped URLs and from user-supplied URLs. Only run scraping/downloading on domains you trust, and inspect any downloaded content before using it in production. - Confirm the legitimacy of the Firecrawl service (api.firecrawl.dev) and restrict the API key scope where possible. Provide the minimum necessary credential and consider using a scoped/test key. If you plan to use it: review the scripts line-by-line, run them in an isolated/sandboxed environment, and avoid running them in a workspace that contains unrelated .env files or sensitive data.

Type: OpenClaw Skill Name: shellbot-video-generator Version: 1.0.0 The bundle provides a legitimate workflow for programmatic video generation using Remotion and Firecrawl. It includes scripts for scraping brand assets (firecrawl.sh) and managing the Remotion lifecycle (remotion.sh). While the skill performs high-risk actions such as executing shell commands (npm install), downloading remote assets, and exposing a local port via a Cloudflare tunnel for previews, these are transparently documented and necessary for the stated functionality. No evidence of malicious intent, data exfiltration, or obfuscation was found.