短视频脚本创作

Short video script generator. 短视频脚本生成器、视频脚本、抖音文案、抖音脚本、快手脚本、口播稿、视频拍摄脚本、YouTube脚本、YouTube Shorts脚本、B站脚本、bilibili脚本、分镜脚本、视频大纲、视频文案、短视频创作、Reels脚本、TikTok脚本、vlog脚本...

This skill appears to do what it claims: generate short‑video scripts from local templates. Before installing/running: (1) verify you are comfortable with the tool creating files under $XDG_DATA_HOME or ~/.local/share/video-script-creator (saved scripts and history.log); (2) confirm python3 and bash are available; (3) inspect the shipped scripts (they are short and readable) if you want to be extra cautious; (4) no network calls or secrets are requested, so there is no obvious exfiltration risk. If you need zero persistence, run the scripts from a disposable environment or set VIDEO_SCRIPT_DIR to a location you control (like a temporary folder).

Type: OpenClaw Skill Name: tvdr-video-script Version: 1.0.0 The skill bundle provides a comprehensive toolset for generating video scripts and storyboards across multiple platforms. However, it contains a path traversal vulnerability in `scripts/script.sh` within the `cmd_save` and `cmd_show` functions, where user-provided input is used directly to construct file paths (e.g., `cat > "$SCRIPTS_DIR/$name.md"`) without sanitization. This could allow an attacker or a manipulated agent to read or overwrite arbitrary files on the system. While the logic appears intended for legitimate video production tasks and lacks clear evidence of intentional malice or data exfiltration, the lack of input validation on file operations poses a security risk.