← 返回 Skills 市场
Tiktok Slideshow Maker
作者
aryanbhasin
· GitHub ↗
· v1.0.0
545
总下载
0
收藏
3
当前安装
1
版本数
在 OpenClaw 中安装
/install tiktok-slideshow
功能描述
Creates TikTok image carousels (slideshows with text overlays on photos) via the ViralBaby API. Use when the user wants to: create TikTok slideshows or carou...
安全使用建议
Before installing: (1) confirm you trust viralbaby.co and read that service's privacy policies — your business/product info and images will be sent there. (2) Ask the skill author to update registry metadata to declare VB_KEY and VB_PASSWORD as required env vars so the runtime requirements are transparent. (3) Avoid storing long-lived passwords in plain environment variables; prefer a secure credential store or token-only workflow. (4) Understand the skill will create/log in accounts and persist API keys if followed — only proceed if you want the agent to manage those credentials on your system. If you need higher assurance, request the exact HTTP flows the skill will execute (so you can review where data is sent) or require interactive confirmation before creating accounts or exporting credentials.
功能分析
Type: OpenClaw Skill
Name: tiktok-slideshow
Version: 1.0.0
The skill instructs the AI agent to save API keys and passwords as environment variables using `export VB_KEY="..."` and `export VB_PASSWORD="..."` commands in SKILL.md. While intended for legitimate credential persistence, this capability implies the agent has shell execution access to modify its environment. This presents a potential shell injection vulnerability if the values to be exported could be manipulated by an attacker, leading to arbitrary command execution. There is no evidence of intentional malicious behavior such as data exfiltration or unauthorized remote control.
能力评估
Purpose & Capability
The name/description (TikTok slideshow via ViralBaby API) matches the runtime instructions: search images, build collections, edit slides, and upload drafts to TikTok. However, the registry metadata declares no required environment variables or primary credential, while the instructions clearly require and depend on an API key (VB_KEY) and optionally a saved password (VB_PASSWORD). That metadata mismatch should be corrected.
Instruction Scope
The SKILL.md instructs the agent to sign up new users, log in, and 'immediately save' the returned API key and password as environment variables to persist across sessions. It also mandates fetching stored user preferences at session start and transmitting user business/product_info to the ViralBaby service. Asking the agent to create accounts and persist secrets, and to automatically fetch/store user preferences, expands the skill's runtime scope beyond simple 'call this API' behavior and could lead to unintended credential persistence or data exfiltration.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is downloaded or written during installation. That reduces install-time risk.
Credentials
Although the skill needs an API key and password at runtime, the registry declares no required env vars. The instructions also tell the agent to store credentials in environment variables (VB_KEY, VB_PASSWORD), which is a weak persistence mechanism (env vars can leak via process listings, logs, backups). Requesting persistent credentials is understandable for a third-party API, but storing raw passwords in env vars and the lack of declared required credentials in metadata are disproportionate and deserve clarification.
Persistence & Privilege
always is false (good). However, the skill explicitly instructs the agent to persist credentials across sessions by exporting env vars; that implies long-term presence of secrets. The skill doesn't request to modify other skills or global agent settings, but the guidance to persist secrets is a notable privileged behavior the user should approve explicitly.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tiktok-slideshow - 安装完成后，直接呼叫该 Skill 的名称或使用
/tiktok-slideshow触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release: Create TikTok image carousels (slideshows with text overlays) using the ViralBaby API.
- Lets you search Unsplash images, build and edit slideshows, and upload directly to TikTok drafts.
- Supports storing user preferences for business/product info and content style to simplify future sessions.
- Offers both auto-selection of background images and manual (preview) mode for user-picked images.
- Includes full workflow for managing image collections and editing slideshow text content.
元数据
常见问题
Tiktok Slideshow Maker 是什么？
Creates TikTok image carousels (slideshows with text overlays on photos) via the ViralBaby API. Use when the user wants to: create TikTok slideshows or carou... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 545 次。
如何安装 Tiktok Slideshow Maker？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tiktok-slideshow」即可一键安装，无需额外配置。
Tiktok Slideshow Maker 是免费的吗？
是的，Tiktok Slideshow Maker 完全免费（开源免费），可自由下载、安装和使用。
Tiktok Slideshow Maker 支持哪些平台？
Tiktok Slideshow Maker 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tiktok Slideshow Maker？
由 aryanbhasin（@aryanbhasin）开发并维护，当前版本 v1.0.0。
推荐 Skills