Varg Ai

Generate AI videos, images, speech, and music using varg. Use when creating videos, animations, talking characters, slideshows, product showcases, social con...

This skill appears to do what it says, but take these precautions before installing or running anything: 1) Do not paste your API key into chat — follow the skill's advice to export it locally. 2) Inspect scripts/setup.sh and scripts/setup.ts before executing them; they are included in the bundle but not auto-run. 3) Be aware the skill will read/write ~/.varg/credentials and append to project .env (so your API key may be persisted locally); if you prefer not to persist secrets to disk, don't follow the save-credentials steps. 4) The SKILL.md fetches a remote SKILL.md from raw.githubusercontent.com and suggests `npx -y skills update` — updating via remote code can execute arbitrary code; prefer manual review or pinned packages. 5) Optional BYOK provider keys (Fal, ElevenLabs, etc.) are supported but not required; only provide those keys if you want to bill providers directly. If you want additional assurance, provide the contents of the two setup scripts for review before running them.

Type: OpenClaw Skill Name: varg-ai Version: 2.0.6 The varg-ai skill bundle is a legitimate tool for generating AI media (video, images, speech, and music) using the Varg AI platform. It provides comprehensive documentation and scripts (setup.sh, setup.ts) for environment detection and authentication. The skill follows security best practices by instructing the agent to avoid asking users for raw API keys in chat and instead uses a standard local credential storage mechanism (~/.varg/credentials). The use of curl for API interactions and bunx for rendering is consistent with its stated purpose, and no evidence of data exfiltration, malicious execution, or prompt injection was found.