think-x-actually-y-video-gen

Create vertical three-beat debunks: you think X, actually Y, but Z—timed English captions on three segments (WeryAI). Use for mindset ladders, hot-take templ...

This bundle appears to be what it says: a Node script that talks to WeryAI and requires a WERYAI_API_KEY. Before you use it: (1) Prefer supplying public https image URLs to avoid the script reading local files. (2) If you do provide local image paths, review scripts/video_gen.js and explicitly confirm the upload — the script will read that file and POST it (with your WERYAI_API_KEY) to api-growth-agent.weryai.com to create a public URL. (3) Use a limited/short-lived API key or an account with minimal credits for testing to limit exposure from accidental paid submissions. (4) Follow the SKILL.md pre-submit gate: do not allow any automated submits without explicit user confirmation of the full expanded prompt and parameters. (5) If you need higher assurance, run the script in an isolated environment, audit network requests, and revoke/regenerate the key after testing.

Type: OpenClaw Skill Name: think-x-actually-y-video-gen Version: 1.0.1 The skill bundle provides a tool for generating videos via the WeryAI API, but it includes a script (scripts/video_gen.js) that can read arbitrary local files and upload them to a remote server (api-growth-agent.weryai.com). While this is documented as a feature for handling local images and SKILL.md mandates a 'Pre-submit gate' for user confirmation, the capability to exfiltrate local data via the upload endpoint is a high-risk behavior. No evidence of intentional malice, obfuscation, or unauthorized persistence was found.