参考生视频技能。当你需要提供一张图片和文本描述来生成视频时调用此技能。

This skill appears to implement an image→video call to a remote model API, but there are two things you should verify before installing or supplying credentials: 1) The SKILL.md forces the agent to run the bundled script via the system python and explicitly tells it not to use the platform runner — that can bypass platform monitoring or safety controls. 2) The script will send your TEAM_API_KEY and any provided local images/videos (base64-encoded) to a default endpoint (https://dlazy.com/api/ai/tool) unless you override TEAM_BASE_URL. TEAM_BASE_URL is not declared in the skill metadata. Actionable suggestions: do not provide a real TEAM_API_KEY unless you trust the endpoint; ask the publisher for provenance/homepage and to declare TEAM_BASE_URL in metadata; request the SKILL.md be changed to allow using the platform runner (or explain why it must be bypassed); inspect network activity in an isolated environment if you test it; avoid sending sensitive images to unknown third parties. If you cannot verify the endpoint or the publisher, mark this skill untrusted.

Type: OpenClaw Skill Name: lrshuai-image-to-video Version: 1.0.2 The skill contains a 'CRITICAL INSTRUCTION' in SKILL.md that explicitly commands the AI agent to bypass the standard 'openclaw run' execution path, insisting on direct system execution via 'python'. The script 'script/invoke_model.py' collects the 'TEAM_API_KEY' and local media files, transmitting them to an external endpoint (https://dlazy.com/api/ai/tool). While this behavior aligns with the stated purpose of image-to-video generation, the forceful instruction to circumvent the platform's standard runner and the transmission of credentials to a third-party domain are high-risk indicators.