← 返回 Skills 市场
jiege-openclaw-video
作者
liangshenghzj888-stack
· GitHub ↗
· v1.2.0
· MIT-0
114
总下载
1
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install jiege-openclaw-video-v1
功能描述
高性能视频生成技能包,集成 Sora 和 VEO 模型接口,提供全自动的视频生成、轮询和下载管理。
使用说明 (SKILL.md)
Skill: jiege-video-skill
作者: 何振杰
功能描述
一个高性能 Veo 视频生成技能,支持通过自然语言一键生成。
适用场景
- 自动化视频创作。
- 无需命令行参数,通过自然语言对话生成视频。
安装说明
- 使用
openclaw install jiege-video-skill安装。 - 确保在
~/.openclaw/openclaw.json中配置了有效的 API Key。
使用方法
安装后,直接在聊天窗口输入:
生成视频:[您的提示词]
例如:
生成视频:一只在雨中奔跑的黑豹,电影质感
运行机制
- 拦截指令后,自动调用后台进程生成。
- 任务完成时,会自动在浏览器中弹出结果页面。
- 内置锁机制,防止并发重复任务。
注意事项
- 请确保系统环境已安装 Python。
- 若提示任务阻塞,请确认无残留的
.lock文件。
安全使用建议
Before installing: review the Python scripts yourself (veo_worker.py, video_interface.py, hooks.js). Key points to consider:
- The skill reads ~/.openclaw/openclaw.json and uses the first apiKey found to call an external API (wanjiedata). If that file contains keys for other services, those keys could be used unintentionally. Create a dedicated provider/apiKey for this skill or modify the code to use a dedicated env var.
- The worker will open any URL returned in the streamed response without validation — a malicious or compromised provider could return a harmful URL. Consider removing/validating the auto-open behavior.
- The skill spawns detached background processes that run independently; test it in a controlled environment first.
- The README/SKILL.md and manifest claim multi-provider integration (Sora) but code only uses one external endpoint — ask the author to clarify which provider is used and to explicitly declare required credentials.
If you cannot audit or modify the code, avoid installing it on systems where your OpenClaw config contains sensitive keys you do not want reused, or run it in an isolated environment.
功能分析
Type: OpenClaw Skill
Name: jiege-openclaw-video-v1
Version: 1.2.0
The skill extracts the first available API key from the user's global OpenClaw configuration file (~/.openclaw/openclaw.json) and sends it to a hardcoded third-party endpoint (maas-openapi.wanjiedata.com) in 'veo_worker.py'. This logic is risky because it may inadvertently leak credentials belonging to other providers (e.g., OpenAI or Anthropic) to the 'wanjiedata' service. While the behavior aligns with the stated goal of generating video, the lack of provider-specific key selection and the use of background processes to execute local Python scripts with user-supplied prompts presents a potential for credential misuse.
能力评估
Purpose & Capability
The description claims integration with Sora and VEO, but the implementation only calls a VEO-like flow and POSTs to https://maas-openapi.wanjiedata.com. The manifest and SKILL.md do not declare any required credential even though the code reads ~/.openclaw/openclaw.json for an apiKey. The declared purpose (multi-provider video generation) does not match the actual endpoints and credential usage.
Instruction Scope
The runtime instructions and code cause the agent to spawn a detached background Python worker which: (a) reads ~/.openclaw/openclaw.json to extract an apiKey, (b) makes streamed HTTP POST requests to an external API (wanjiedata), (c) aggregates streamed content and blindly opens the first URL found in the response using os.startfile, and (d) writes log and lock files into the skill directory. Reading an agent config and opening arbitrary returned URLs are broader actions than the SKILL.md explicitly documents and can have surprising side effects.
Install Mechanism
This is instruction-only (no install spec). The bundle includes Python scripts and a requirements.txt (requests). No remote downloads or installers are used, which lowers supply-chain risk, but code will be placed on disk and executed by spawning a detached Python process.
Credentials
The skill accesses ~/.openclaw/openclaw.json to extract an apiKey but declares no required environment variables or primary credential. It takes the first provider apiKey it finds (no validation) and uses it to authenticate to a third-party endpoint. This may cause the skill to use a key intended for another service, effectively granting that external host access to your configured provider credentials.
Persistence & Privilege
always:false (normal). However, the skill deliberately launches fully detached background processes (child.unref() / subprocess.Popen detached) that run independently of the agent lifecycle; those processes run with the user's privileges and will continue until completion. This is expected for asynchronous workloads but increases blast radius if the worker does unexpected network activity.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install jiege-openclaw-video-v1 - 安装完成后,直接呼叫该 Skill 的名称或使用
/jiege-openclaw-video-v1触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.2.0
Initial release
v1.0.0
Initial release
元数据
常见问题
jiege-openclaw-video 是什么?
高性能视频生成技能包,集成 Sora 和 VEO 模型接口,提供全自动的视频生成、轮询和下载管理。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 114 次。
如何安装 jiege-openclaw-video?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install jiege-openclaw-video-v1」即可一键安装,无需额外配置。
jiege-openclaw-video 是免费的吗?
是的,jiege-openclaw-video 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
jiege-openclaw-video 支持哪些平台?
jiege-openclaw-video 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 jiege-openclaw-video?
由 liangshenghzj888-stack(@liangshenghzj888-stack)开发并维护,当前版本 v1.2.0。
推荐 Skills