WaveSpeedAI Veo 3.1 Fast Video Generation

Generate and extend videos using Google's Veo 3.1 Fast model via WaveSpeed AI. Supports text-to-video, image-to-video, and video extension. Features up to 4K...

This skill appears to do what it says (call WaveSpeed's Veo model to generate/extend videos), but the SKILL.md asks you to set WAVESPEED_API_KEY while the registry metadata does not declare that credential — that's a transparency gap. Before installing or using it: (1) verify the skill's source and homepage (wavespeed.ai looks referenced but the skill metadata lacks a homepage); (2) confirm the exact scope and permissions of the WAVESPEED_API_KEY you will provide (use least privilege and a revocable/test key if possible); (3) avoid uploading sensitive local files unless you trust wavespeed.ai's privacy/retention policy; (4) ask the publisher to update metadata to declare required env vars and provide a homepage or source repository so you can verify authenticity. These steps will reduce risk; the current mismatch is suspicious but not proof of malicious intent.

Type: OpenClaw Skill Name: wavespeed-veo-31-fast Version: 1.0.0 The skill bundle is benign. It provides instructions for generating and extending videos using the WaveSpeed AI platform, which involves making API calls and potentially uploading local files. The `SKILL.md` file explicitly includes a 'Security Constraints' section that warns users about the risks of 'arbitrary URL loading' and the need for 'input validation' and secure API key storage. These warnings indicate responsible disclosure of potential misuse vectors rather than malicious intent within the skill itself. The described capabilities (file system access for uploads, network access for API calls) are necessary for the skill's stated purpose, and there are no instructions for the agent to perform unauthorized actions, exfiltrate data, or establish persistence.