← Back to Skills Marketplace
Tiktok Slideshow Maker
by
aryanbhasin
· GitHub ↗
· v1.0.0
545
Downloads
0
Stars
3
Active Installs
1
Versions
Install in OpenClaw
/install tiktok-slideshow
Description
Creates TikTok image carousels (slideshows with text overlays on photos) via the ViralBaby API. Use when the user wants to: create TikTok slideshows or carou...
Usage Guidance
Before installing: (1) confirm you trust viralbaby.co and read that service's privacy policies — your business/product info and images will be sent there. (2) Ask the skill author to update registry metadata to declare VB_KEY and VB_PASSWORD as required env vars so the runtime requirements are transparent. (3) Avoid storing long-lived passwords in plain environment variables; prefer a secure credential store or token-only workflow. (4) Understand the skill will create/log in accounts and persist API keys if followed — only proceed if you want the agent to manage those credentials on your system. If you need higher assurance, request the exact HTTP flows the skill will execute (so you can review where data is sent) or require interactive confirmation before creating accounts or exporting credentials.
Capability Analysis
Type: OpenClaw Skill
Name: tiktok-slideshow
Version: 1.0.0
The skill instructs the AI agent to save API keys and passwords as environment variables using `export VB_KEY="..."` and `export VB_PASSWORD="..."` commands in SKILL.md. While intended for legitimate credential persistence, this capability implies the agent has shell execution access to modify its environment. This presents a potential shell injection vulnerability if the values to be exported could be manipulated by an attacker, leading to arbitrary command execution. There is no evidence of intentional malicious behavior such as data exfiltration or unauthorized remote control.
Capability Assessment
Purpose & Capability
The name/description (TikTok slideshow via ViralBaby API) matches the runtime instructions: search images, build collections, edit slides, and upload drafts to TikTok. However, the registry metadata declares no required environment variables or primary credential, while the instructions clearly require and depend on an API key (VB_KEY) and optionally a saved password (VB_PASSWORD). That metadata mismatch should be corrected.
Instruction Scope
The SKILL.md instructs the agent to sign up new users, log in, and 'immediately save' the returned API key and password as environment variables to persist across sessions. It also mandates fetching stored user preferences at session start and transmitting user business/product_info to the ViralBaby service. Asking the agent to create accounts and persist secrets, and to automatically fetch/store user preferences, expands the skill's runtime scope beyond simple 'call this API' behavior and could lead to unintended credential persistence or data exfiltration.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is downloaded or written during installation. That reduces install-time risk.
Credentials
Although the skill needs an API key and password at runtime, the registry declares no required env vars. The instructions also tell the agent to store credentials in environment variables (VB_KEY, VB_PASSWORD), which is a weak persistence mechanism (env vars can leak via process listings, logs, backups). Requesting persistent credentials is understandable for a third-party API, but storing raw passwords in env vars and the lack of declared required credentials in metadata are disproportionate and deserve clarification.
Persistence & Privilege
always is false (good). However, the skill explicitly instructs the agent to persist credentials across sessions by exporting env vars; that implies long-term presence of secrets. The skill doesn't request to modify other skills or global agent settings, but the guidance to persist secrets is a notable privileged behavior the user should approve explicitly.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tiktok-slideshow - After installation, invoke the skill by name or use
/tiktok-slideshow - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Initial release: Create TikTok image carousels (slideshows with text overlays) using the ViralBaby API.
- Lets you search Unsplash images, build and edit slideshows, and upload directly to TikTok drafts.
- Supports storing user preferences for business/product info and content style to simplify future sessions.
- Offers both auto-selection of background images and manual (preview) mode for user-picked images.
- Includes full workflow for managing image collections and editing slideshow text content.
Metadata
Frequently Asked Questions
What is Tiktok Slideshow Maker?
Creates TikTok image carousels (slideshows with text overlays on photos) via the ViralBaby API. Use when the user wants to: create TikTok slideshows or carou... It is an AI Agent Skill for Claude Code / OpenClaw, with 545 downloads so far.
How do I install Tiktok Slideshow Maker?
Run "/install tiktok-slideshow" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tiktok Slideshow Maker free?
Yes, Tiktok Slideshow Maker is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Tiktok Slideshow Maker support?
Tiktok Slideshow Maker is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tiktok Slideshow Maker?
It is built and maintained by aryanbhasin (@aryanbhasin); the current version is v1.0.0.
More Skills