AI Video Gen

AI视频生成与编辑，使用火山引擎 Doubao Seedance 模型。支持文生视频、图生视频、有声视频。当用户要求生成视频、制作视频、文生视频、图生视频时使用此 skill。

This skill appears to do what it says (generate videos via Volcengine/Doubao) and contains only the expected network and file operations, but check a few things before installing or running it: - Fix the BASE_URL bug: open scripts/generate_video.py and change the BASE_URL line from os.environ.get("VIDEO_GEN_API_KEY", ...) to os.environ.get("VIDEO_GEN_BASE_URL", "https://ark.cn-beijing.volces.com/api/v3"). Without that edit the intended VIDEO_GEN_BASE_URL env var will be ignored. - Provide only a Volcengine API key you trust and avoid passing local file paths that contain sensitive data (the script will read any --first-frame or --reference-image file you supply and send it to the remote API). - The README/SKILL.md include an example for uploading to Feishu; if you use that, you will need Feishu app_id/app_secret and will be uploading the generated video to a third-party cloud — verify you are comfortable sharing that content. - The skill is from an unknown source (no homepage in registry metadata). If you plan to run it in a sensitive environment, review the repository or run in an isolated environment first. If you want higher assurance, ask the author for an official source repository or sign-off, or run the script in a disposable container and inspect network traffic and code before using real API keys or sensitive input files.

Type: OpenClaw Skill Name: video-gen Version: 1.0.0 The script `scripts/generate_video.py` contains a critical logic error where the `VIDEO_GEN_API_KEY` environment variable is incorrectly used as the `BASE_URL` for API requests. This causes the script to attempt network connections using the secret key as a hostname, which leads to functional failure and potential credential exposure in network logs or DNS queries. Additionally, `SKILL.md` provides instructions for the AI agent to programmatically handle sensitive Feishu (Lark) credentials (`app_id` and `app_secret`), which increases the risk of credential theft or accidental disclosure through the agent's execution context.