Qwen Video Generator

阿里云百炼文生视频工具。使用 wan2.2-t2v-plus 模型将文本描述生成视频。**当以下情况时使用此 Skill**：(1) 用户需要根据文字描述生成视频 (2) 用户提到"文生视频"、"生成视频"、"AI视频"、"text to video" (3) 需要创建短视频内容 (4) 需要可视化场景描述。支持...

This skill appears to be a straightforward text-to-video client that calls DashScope (dashscope.aliyuncs.com) and downloads the resulting MP4. Before installing: 1) Verify the publisher/source (no homepage provided) and confirm dashscope.aliyuncs.com is the intended service. 2) Expect to provide an API key (DASHSCOPE_API_KEY_VIDEO or DASHSCOPE_API_KEY); the registry omitted declaring this — ask the publisher to add it to metadata so the platform can treat the secret properly. 3) Limit the API key's scope and rotate it if possible; do not reuse high-privilege keys. 4) The script writes files to workspace/videos (or OPENCLAW_WORKSPACE/videos if VIDEO_OUTPUT_DIR unset) and sets 0644 permissions — ensure that directory is acceptable and does not expose sensitive data. 5) If you need higher assurance, run the script in an isolated environment and inspect network calls (it only calls dashscope endpoints) or request the publisher's official docs/homepage. The code shows no other obvious exfiltration, but the metadata omission of required credentials is the primary red flag.

Type: OpenClaw Skill Name: qwen-video-generator Version: 1.0.2 The skill bundle is a legitimate tool for generating videos using Alibaba's DashScope API. The Python script `scripts/generate_video.py` correctly handles API authentication via environment variables, task submission, status polling, and file downloading to a designated workspace. No evidence of data exfiltration, malicious execution, or prompt injection was found.