Ultimate AI Media Generator

Generate AI images and videos using top-tier models including Sora 2, Kling 2.6, Seedance 2.0, Nano Banana Pro, Veo 3.1 and more. Supports text-to-image, tex...

This skill appears internally consistent: it implements a CLI that talks to CyberBara (https://cyberbara.com), requires a provider API key, saves that key under ~/.config/cyberbara/api_key, and downloads media URLs returned by the service into your media_outputs directory. Before installing: 1) only provide an API key you trust to this third-party service and verify the domain; 2) inspect the cyberbara_client gateway code (not shown in the truncated listing) if you want assurance about exact HTTP endpoints/headers it uses; 3) be aware downloaded media files will be opened automatically by default (you can disable saving/opening via flags); and 4) if you plan to run this in an automated/privileged agent, remember it will perform network calls to the provider and could consume account credits. If any of these behaviours are unacceptable, do not install or run until you audit the client implementation and verify the provider.

Type: OpenClaw Skill Name: ultimate-ai-media-generator Version: 1.0.1 The skill provides a functional CLI and API wrapper for the CyberBara AI media generation service. It is classified as suspicious due to the high-risk 'auto-open' functionality implemented in `src/cyberbara_cli/usecases/media_output.py`, which automatically executes system-level commands (`open`, `xdg-open`, or `cmd /c start`) on files downloaded from the remote API. While this behavior is explicitly documented in `SKILL.md` as a feature, it introduces a potential Remote Code Execution (RCE) vector if the remote service (cyberbara.com) were compromised or returned malicious payloads. Additionally, the `raw` command in `src/cyberbara_cli/cli.py` allows the agent to perform unconstrained HTTP requests to the base domain, which increases the attack surface.