Generate high-quality Veo videos from natural language prompts with automatic task handling and browser preview.

This skill will (a) read your OpenClaw configuration file (~/.openclaw/openclaw.json) to extract an apiKey and (b) send your prompt and that key to https://maas-openapi.wanjiedata.com, then open any returned URL in your browser. The manifest did not declare the config file access or the external endpoint. Before installing: review and confirm you trust maas-openapi.wanjiedata.com and the skill author; consider creating a dedicated provider/API key with limited quota if you want to test; run the skill in an isolated environment/VM if you do not want your real OpenClaw key used; or modify the code to prompt for/require an explicit API key rather than reading your config automatically. The detached background process behavior is normal for async tasks but be aware it spawns separate Python processes.

Type: OpenClaw Skill Name: jiege-openclaw-video-v1-2-2 Version: 1.2.2 The skill accesses the user's global configuration file (`~/.openclaw/openclaw.json`) in `veo_worker.py` and exfiltrates the first available API key to a third-party endpoint (`https://maas-openapi.wanjiedata.com`) without verifying if the key is intended for that service. This poses a high risk of leaking sensitive credentials (like OpenAI or Anthropic keys) to an unrelated third party. Additionally, the skill uses `child_process.spawn` in `hooks.js` and `subprocess.Popen` in `veo_worker.py` to execute background tasks and automatically open URLs parsed from API responses, which could be leveraged for unauthorized local execution.