← Back to Skills Marketplace
Video Generator
by
diederik24
· GitHub ↗
· v0.1.0
557
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install skill-5
Description
AI video production workflow using Remotion. Use when creating videos, short films, commercials, or motion graphics. Triggers on requests to make promotional...
Usage Guidance
This skill's instructions include website scraping, downloading assets, running npm/npx commands, and starting a public tunnel — all actions that can expose local data or transmit information externally. Before installing/use: (1) Ask the author for the missing manifests: which env vars (FIRECRAWL_API_KEY) and helper scripts are required, and why they weren't declared. (2) Inspect the referenced scripts (skills/cloudflare-tunnel/scripts/tunnel.sh, scripts/firecrawl.sh, TOOLS.md) — do not run them until you review their contents. (3) If you must test, run the workflow in an isolated environment (VM/container) with no access to sensitive files or credentials. (4) Prefer providing a dedicated Firecrawl API key with limited scope or a test key, and avoid putting any unrelated secrets in .env. (5) If you cannot review the scripts or confirm the source, do not expose your machine via the tunnel; instead render locally and deliver files securely. The mismatch between SKILL.md and the declared metadata is a significant red flag; proceed only after clarification and code review.
Capability Analysis
Type: OpenClaw Skill
Name: skill-5
Version: 0.1.0
The skill instructs the AI agent to expose a local development server (Remotion Studio on port 3000) to the public internet using a Cloudflare tunnel (`bash skills/cloudflare-tunnel/scripts/tunnel.sh start 3000`) as detailed in `SKILL.md`. While the stated purpose is for the user to preview the video, this public exposure of a development environment creates a significant attack surface. If the Remotion Studio or the generated project contains vulnerabilities, or if the agent is later prompted to inject malicious code into the project files, this publicly accessible tunnel could be exploited by external attackers. This constitutes a high-risk vulnerability, not direct malware, as there's no explicit evidence of intentional malicious behavior like data exfiltration or persistence within the provided instructions.
Capability Assessment
Purpose & Capability
The stated purpose (programmatic video production with Remotion) reasonably explains use of Remotion, npm, and exposing a dev server for preview. However the SKILL.md mandates use of Firecrawl (a scraping API) and a Cloudflare tunnel script located at skills/cloudflare-tunnel/scripts/tunnel.sh — neither the API key nor these helper scripts/tools are declared in the skill metadata. Requesting a website-scraping service and a public tunnel is plausibly related to the purpose, but the lack of declared requirements and the reliance on out-of-repo scripts is incoherent.
Instruction Scope
The instructions direct the agent to perform website scraping for brand data, download arbitrary assets (favicon, OG image, screenshots), run npm installs and npx scaffolds, start a background dev server, and call a cloudflare-tunnel script to expose localhost. These steps involve network access, arbitrary external downloads, and exposing a local port — operations that go beyond just generating video files and could expose local resources or transmit data. The SKILL.md also references TOOLS.md and other scripts that are not present, giving the agent broad, ambiguous discretion.
Install Mechanism
There is no install spec (instruction-only), which reduces immediate disk-write risk from a packaged installer. However the runtime instructions tell the agent to run commands that will fetch and run remote code (npx create-video, npm install, curl to arbitrary URLs, and an external tunnel script). Because the skill relies on out-of-skill scripts and network fetches, the effective install/run surface is higher than the manifest suggests.
Credentials
The SKILL.md states 'MANDATORY: Use Firecrawl' and instructs setting FIRECRAWL_API_KEY in a .env file, but the skill's declared requirements list zero environment variables and no primary credential. That mismatch is a clear incoherence. Additionally, the workflow implies broad network and file-system access (downloading assets into the project, exposing a tunnel), which are disproportionate relative to the metadata and which should be explicitly declared and justified.
Persistence & Privilege
The skill does not set always:true and does not request persistent privileges in the registry metadata. Autonomous model invocation is allowed by default (disable-model-invocation:false), which is normal; this by itself is not flagged. The runtime steps do instruct running long-lived background processes and opening a public tunnel, but those are transient runtime actions rather than registry-level persistence.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install skill-5 - After installation, invoke the skill by name or use
/skill-5 - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.0
Initial release of video-generator skill for AI-powered Remotion video workflows.
- Automates professional motion graphics video creation using Remotion and React.
- Mandates brand data scraping with Firecrawl to ensure visual accuracy and brand consistency for product/company videos.
- Outlines exact project setup: creating folders, installing dependencies, fixing scripts, and exposing via Cloudflare tunnel for user preview.
- Enforces advanced motion graphics principles: layered scenes, overlapping transitions, custom animation—avoiding slideshow-style videos.
- Provides reference architecture, animation timing, and visual design guidelines to maintain high production quality.
- Detailed workflow ensures interactive video iteration and easy user feedback via public preview URL.
Metadata
Frequently Asked Questions
What is Video Generator?
AI video production workflow using Remotion. Use when creating videos, short films, commercials, or motion graphics. Triggers on requests to make promotional... It is an AI Agent Skill for Claude Code / OpenClaw, with 557 downloads so far.
How do I install Video Generator?
Run "/install skill-5" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Video Generator free?
Yes, Video Generator is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Video Generator support?
Video Generator is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Video Generator?
It is built and maintained by diederik24 (@diederik24); the current version is v0.1.0.
More Skills