← 返回 Skills 市场
rainlin10

zxcvbnm-mnbvcxz

作者 Rainlin10 · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
140
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zxcvbnm-mnbvcxz
功能描述
Executes AIVideoMaker API workflows for text-to-video and image-to-video generation, including task creation, status polling, task details retrieval, and can...
安全使用建议
This package's code implements the AIVideoMaker API and appears to only use the AIVIDEO_API_KEY to call the vendor's endpoints, which is consistent with its advertised functionality. However, before installing: 1) Verify origin — the published skill name (zxcvbnm-mnbvcxz) and registry metadata do not match internal filenames and manifest (aivideo-api-executor) and versions differ; this could be an accidental mispackaging or a sign it was republished under a different name. 2) Confirm you trust the owner/source (no homepage is provided). 3) Review the included JS files yourself (they're short and readable) or ask the publisher to explain the metadata mismatches. 4) Provide only a scoped API key, rotate it if you decide to install, and monitor usage. 5) Be aware of the Node runtime expectation (code uses fetch — ensure Node version supports global fetch or supply a compatible runtime). If you cannot verify the origin or the metadata inconsistencies are unexplained, avoid installing.
功能分析
Type: OpenClaw Skill Name: zxcvbnm-mnbvcxz Version: 1.0.1 The skill bundle is a standard API wrapper for the AIVideoMaker service. It includes robust input validation in 'scripts/contract.mjs', safe logging practices that redact API keys in 'scripts/aivideo-client.mjs', and a well-structured workflow in 'scripts/run-workflow.mjs'. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; all network activity is directed to the legitimate service domain (aivideomaker.ai).
能力评估
Purpose & Capability
The implementation (scripts/*, references/*, contract validation) clearly implements an AIVideoMaker API workflow and only requires an AIVIDEO_API_KEY and node. That capability is coherent with the described purpose. However, the published skill name (zxcvbnm-mnbvcxz) and registry metadata do not match internal filenames/_meta.json/manifest (aivideo-api-executor), and the registry version (1.0.1) differs from package version (1.0.12). These metadata mismatches are unexpected and reduce trust.
Instruction Scope
SKILL.md and the scripts restrict actions to: accept CLI payload, validate payload, and call the AIVideoMaker API endpoints (baseUrl defaults to https://aivideomaker.ai). The code reads only process.env.AIVIDEO_API_KEY and CLI args; it does not read arbitrary host files or other env vars. Logging masks headers and strips headers from log output. No evidence of data exfiltration to unexpected endpoints.
Install Mechanism
There is no installer that downloads remote code; the package includes local JS files only (low install risk). No external archives or obscure URLs are fetched during install. Note: package.json requires node but the package lists engines >=14; the code uses fetch which may require Node >=18 to work as-is—this is a runtime compatibility issue, not a direct security problem.
Credentials
The only required secret is AIVIDEO_API_KEY (declared in several places). Optional env variables (AIVIDEO_TIMEOUT_MS, AIVIDEO_MAX_RETRIES) are reasonable. One inconsistency: top-level 'Requirements' summary said 'required binaries: none' but SKILL.md and clawhub.manifest.json declare node as required. Primary credential was missing in the initial registry summary but present in manifest — small inconsistencies that should be reconciled.
Persistence & Privilege
always:false and model invocation not disabled (platform default). The skill does not request persistent system privileges, does not modify other skills, and does not require system config-path access.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install zxcvbnm-mnbvcxz
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /zxcvbnm-mnbvcxz 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Removed example input and smoke test script files, reducing bundled samples and testing code. - No changes to skill functionality or API—core execution workflow remains the same. - Updated documentation with improved action definitions, security practices, and required environment metadata.
元数据
Slug zxcvbnm-mnbvcxz
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

zxcvbnm-mnbvcxz 是什么?

Executes AIVideoMaker API workflows for text-to-video and image-to-video generation, including task creation, status polling, task details retrieval, and can... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 140 次。

如何安装 zxcvbnm-mnbvcxz?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install zxcvbnm-mnbvcxz」即可一键安装,无需额外配置。

zxcvbnm-mnbvcxz 是免费的吗?

是的,zxcvbnm-mnbvcxz 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

zxcvbnm-mnbvcxz 支持哪些平台?

zxcvbnm-mnbvcxz 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 zxcvbnm-mnbvcxz?

由 Rainlin10(@rainlin10)开发并维护,当前版本 v1.0.1。

💬 留言讨论