← 返回 Skills 市场
289
总下载
1
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install shortvideo-skills
功能描述
Create videos using ShortVideo API. Supports product-to-video, image-to-ad-video, and replicate-video. Use this skill when users want to: generate product vi...
安全使用建议
This package appears to implement a legitimate ShortVideo API client, but take these precautions before installing or using it: 1) The skill actually requires SHORTVIDEO_BASE_URL and SHORTVIDEO_API_KEY even though the registry metadata didn't list them — do not provide secrets unless you trust the ShortVideo service and this code. 2) The scripts will upload any local file paths you pass and will download arbitrary URLs and then upload them — avoid passing sensitive local files (private documents, SSH keys, etc.). 3) Avoid blindly following the examples that prefix commands with 'source ~/.zshrc && ...' — sourcing your shell RC can expose unrelated environment variables and secrets to the process; instead set only the SHORTVIDEO_* vars in a dedicated env file or export them manually in the same shell session. 4) Inspect scripts (impl.py and the task scripts) yourself to confirm no unexpected endpoints or hard-coded hosts; confirm SHORTVIDEO_BASE_URL points to the official service you intend to use. 5) If you want lower risk, run the scripts in an isolated environment (container, VM) and use a short-lived API key or restricted service account. If you need me to, I can point out the exact lines in the scripts that do uploads, downloads, and source recommendations.
功能分析
Type: OpenClaw Skill
Name: shortvideo-skills
Version: 0.1.1
The shortvideo-skills bundle provides a legitimate set of tools for interacting with the ShortVideo AI API (api.shortvideo.ai) to generate marketing and advertisement videos. The scripts (e.g., product-to-video.py, image-to-ad-video.py, and impl.py) implement standard API interaction patterns, including file uploads to OSS, task creation, and status polling. The bundle includes clear documentation and follows expected security practices for API-based skills, such as using environment variables for credentials and implementing file size/type validation. No indicators of malicious intent, data exfiltration, or prompt injection were found.
能力评估
Purpose & Capability
The name/description (create videos via ShortVideo API) matches the scripts and endpoints in the repository: uploads to /api/oss/upload and creates tasks /api/task/create. Requiring a SHORTVIDEO_BASE_URL and SHORTVIDEO_API_KEY is coherent with the stated purpose — however the registry metadata declares no required environment variables or primary credential, which is inconsistent with the actual runtime requirements.
Instruction Scope
Runtime instructions and scripts will (a) read environment variables for the API host/key, (b) download arbitrary HTTP(S) URLs to temp files and upload them to the service, and (c) upload any local file paths provided as arguments. The SKILL.md and examples recommend running commands prefixed with 'source ~/.zshrc && ...', which causes the shell RC to be sourced and can pull many unrelated environment variables into the process. These behaviors are within the functionality scope but increase risk of unintentionally exposing other secrets or uploading sensitive local files if the agent or user supplies unsafe paths or blindly sources shell RC.
Install Mechanism
No install spec; this is an instruction+script bundle. Dependencies are minimal (requests). There are no remote install downloads or archive extracts. This is low-risk from an installer perspective.
Credentials
The only env vars the code actually uses are SHORTVIDEO_BASE_URL and SHORTVIDEO_API_KEY — these are proportionate to contacting the ShortVideo service. The problem is that the skill metadata declared no required envs/credential; the SKILL.md asks users to store the API key in ~/.claude or ~/.openclaw config or in shell RC, which can persist a secret in a config file. No other unrelated secrets or service credentials are requested.
Persistence & Privilege
The skill is not force-installed (always: false) and does not request special platform privileges. It does not attempt to modify other skills or global settings. Autonomous invocation is allowed (platform default) but that alone is not flagged.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install shortvideo-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/shortvideo-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
- Added README.md for improved documentation and onboarding.
- Updated core scripts for product-to-video, image-to-ad-video, replicate-video, and polling to enhance reliability and maintainability.
- Minor updates to parameter handling and code organization across scripts.
- No changes to user-facing interface or API usage.
v0.1.0
shortvideo-skills 0.1.0 – Initial Release
- Introduces skill for generating videos via the ShortVideo API.
- Supports product-to-video, image-to-ad-video, and replicate-video tasks.
- Includes detailed CLI usage for each function: product video from image, ad video from 1-7 images, video replication with new images, and polling status.
- Provides flexible configuration options for API credentials.
- Documents supported input types, parameters, credit costs, and sample commands for each subcommand.
元数据
常见问题
Shortvideo 是什么？
Create videos using ShortVideo API. Supports product-to-video, image-to-ad-video, and replicate-video. Use this skill when users want to: generate product vi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 289 次。
如何安装 Shortvideo？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install shortvideo-skills」即可一键安装，无需额外配置。
Shortvideo 是免费的吗？
是的，Shortvideo 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Shortvideo 支持哪些平台？
Shortvideo 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Shortvideo？
由 TheCur（@thecur）开发并维护，当前版本 v0.1.1。
推荐 Skills