← 返回 Skills 市场
zero2ai-hub

Skill Veo3 Video Gen

作者 Zero2Ai · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
439
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install skill-veo3-video-gen
功能描述
Generate and stitch short videos via Google Veo 3.x using the Gemini API (google-genai). Use when you need to create video clips from prompts (ads, UGC-style...
安全使用建议
This skill appears to implement Veo/Gemini video generation, but the package metadata failing to declare GEMINI_API_KEY is a red flag. Before installing: (1) confirm the publisher/source and ask them to correct the metadata to list GEMINI_API_KEY as required; (2) run the script in an isolated environment (container/VM) the first time; (3) restrict the GEMINI_API_KEY to minimal billing/quota and rotate it after testing; (4) inspect the full generate_video.py (you have a truncated copy here) to ensure there are no unexpected network endpoints or data-exfiltration steps; (5) ensure ffmpeg and any dependencies are installed from trusted sources. If the source is unknown/untrusted, do not provide production API keys or sensitive credentials.
功能分析
Type: OpenClaw Skill Name: skill-veo3-video-gen Version: 1.0.0 The skill is suspicious due to multiple file system vulnerabilities in `scripts/generate_video.py`. The `--filename` argument is vulnerable to path traversal, allowing an attacker to write files to arbitrary locations. Additionally, the `--reference-image` and `--last-frame-image` arguments allow arbitrary file reads, potentially exposing sensitive data if the agent has broad file system permissions. These are critical vulnerabilities that could be exploited, but there is no clear evidence of intentional malicious behavior such as data exfiltration to an unauthorized endpoint or backdoor installation.
能力评估
Purpose & Capability
The SKILL.md and bundled script clearly require a Gemini API key (GEMINI_API_KEY) and call a Google Veo model via the google-genai SDK; however the registry metadata lists no required environment variables or primary credential. That mismatch is an incoherence between what the skill needs and what the package declares.
Instruction Scope
Instructions are narrowly focused on generating video, polling the API, downloading files, optionally extracting last frames and concatenating segments with ffmpeg. The script uses subprocess to call ffmpeg and runs a shell check for binaries — these are expected for this functionality. SKILL.md references storing the key in 'openclaw.json' (second key) which is an unexpected storage hint and should be clarified.
Install Mechanism
This is instruction-only with a bundled Python script. There is no install spec that downloads arbitrary code from an external URL. The script declares dependencies (google-genai, pillow) in a header comment; that is normal for a Python script meant to be run in an environment that installs dependencies.
Credentials
The runtime requires GEMINI_API_KEY (or --api-key) to call the Gemini/Veo API which is appropriate for the stated purpose, but the registry metadata omits this required environment variable. The skill also asks users to provide keys and mentions fallback to other skills (Runway) — ensure no additional credential requirements are hidden.
Persistence & Privilege
The skill does not request always:true, system-wide config changes, or other elevated privileges. It reads/writes local files (output MP4s, intermediate PNGs) which is expected for this use.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install skill-veo3-video-gen
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /skill-veo3-video-gen 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Veo 3 Video Generation skill. - Generate short MP4 video clips from text prompts using Google Veo 3.x via the Gemini API. - Supports creating longer videos by automatically stitching multiple segments. - Includes options for prompt consistency, segment style, reference images, and intermediate file handling. - Handles API rate limits and provides fallback instructions. - Requires GEMINI_API_KEY and ffmpeg for multi-segment videos.
元数据
Slug skill-veo3-video-gen
版本 1.0.0
许可证
累计安装 1
当前安装数 1
历史版本数 1
常见问题

Skill Veo3 Video Gen 是什么?

Generate and stitch short videos via Google Veo 3.x using the Gemini API (google-genai). Use when you need to create video clips from prompts (ads, UGC-style... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 439 次。

如何安装 Skill Veo3 Video Gen?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install skill-veo3-video-gen」即可一键安装,无需额外配置。

Skill Veo3 Video Gen 是免费的吗?

是的,Skill Veo3 Video Gen 完全免费(开源免费),可自由下载、安装和使用。

Skill Veo3 Video Gen 支持哪些平台?

Skill Veo3 Video Gen 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Skill Veo3 Video Gen?

由 Zero2Ai(@zero2ai-hub)开发并维护,当前版本 v1.0.0。

💬 留言讨论