剪映API视频合成自动化。通过剪映代理API完成视频全流程制作，包括草稿创建、素材添加（图片/视频/音频）、文本字幕编辑、特效处理、云渲染导出。适用于需要批量生成视频、自动合成短视频、动态字幕视频等场景。

This skill appears to be a working instruction set for automating video composition, but exercise caution before installing or using it. Key considerations: - The documented API hosts are UAT/test domains (np-newsmgr-uat.eastmoney.com and emapd.com), not an official Jianying/CapCut domain. Confirm who operates these endpoints and whether they are intended for production use. - The API is documented as unauthenticated (no API key). Do NOT upload sensitive or private media to these endpoints unless you trust the operator and have explicit data-retention guarantees. - If you need production-grade integration, ask the skill author for the official API endpoint, authentication details, and a privacy/data-retention policy. - When testing, use only non-sensitive sample media and monitor network activity. Consider sandboxing or restricting the agent's ability to upload files until you verify the service. What would change this assessment to 'benign': explicit, authoritative documentation or homepage showing these endpoints are official/properly managed (not UAT), and clear authentication/data-handling guidance from the owner. If you cannot verify ownership and intent, treat the skill as untrusted for sensitive data.

Type: OpenClaw Skill Name: jianying-video-compose Version: 1.0.0 The skill bundle provides instructions and API documentation for an AI agent to automate video composition using a CapCut proxy service hosted on East Money's UAT environment (eastmoney.com). It includes standard video editing capabilities such as uploading assets, managing drafts, adding text/media, and triggering cloud rendering. While the documentation in SKILL.md and references/api_reference.md indicates that the target API endpoints currently lack authentication, this is a characteristic of the external service rather than a malicious feature of the skill itself. The skill's logic is entirely aligned with its stated purpose of video automation and contains no evidence of data exfiltration, malicious execution, or prompt injection.