Tomoviee Image to Video

Generate videos from image + text prompts using Tomoviee Image-to-Video API (`tm_img2video_b`) through Wondershare OpenAPI gateway (`https://openapi.wondersh...

This package mostly does what it claims, but there are some red flags to resolve before installing: (1) the manifest does not declare the required credentials (app_key/app_secret) — ask the publisher to add them as required env vars or document how credentials will be provided securely; (2) avoid running scripts that print tokens (scripts/generate_auth_token.py) in environments where stdout is logged or shared; treat the app_key/app_secret as sensitive and inject them via a secure secret mechanism rather than pasting into chat; (3) be cautious with the optional callback URL — only use trusted endpoints because the service can POST generated results (and potentially user-supplied images/prompts) to that URL; (4) verify you trust the external gateway (openapi.wondershare.cc) and review its data retention/privacy policy because your images/prompts will be sent to a third party. If the author can correct the manifest to declare the credentials and avoid helper scripts that print secrets, my confidence that this package is coherent would increase.

Type: OpenClaw Skill Name: tomoviee-image-to-video Version: 1.0.3 The skill bundle is a legitimate integration for the Tomoviee AI Image-to-Video service provided by Wondershare. The Python client (scripts/tomoviee_img2video_client.py) and authentication helper (scripts/generate_auth_token.py) perform standard API interactions with the documented endpoints at openapi.wondershare.cc. No evidence of data exfiltration, malicious execution, or prompt injection was found; the code logic is transparent and aligns with the stated purpose of generating videos from images.