Runware Image & Video generation
v1.0.0Generate images and videos via Runware API. Access to FLUX, Stable Diffusion, Kling AI, and other top models. Supports text-to-image, image-to-image, upscaling, text-to-video, and image-to-video. Use when generating images, creating videos from prompts or images, upscaling images, or doing AI image transformation.
⭐ 1· 2.1k·7 current·7 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
Name, description, SKILL.md, and included scripts all align: they call https://api.runware.ai/v1 to perform text->image, img2img, upscaling, text->video and img->video. The required functionality (network calls, uploading images, downloading results) is coherent with the stated purpose.
Instruction Scope
Runtime instructions and the scripts are narrowly scoped to interacting with the Runware API and reading/writing image/video files. There are no instructions to read unrelated system config, shell history, or to contact third-party endpoints outside runware.ai for control.
Install Mechanism
No install spec — code files are shipped with the skill and there are no external downloads or package installs. This minimizes install-time risk, though the included scripts will make outbound network calls at runtime.
Credentials
SKILL.md and both scripts require a Runware API key (RUNWARE_API_KEY or --api-key) but the registry metadata lists no required environment variables or primary credential — this is an inconsistency. Additionally, the scripts will read local image files and embed them as base64 in API requests (i.e., they upload the raw image content), which is expected for img2img/upscale but has privacy implications that the metadata does not call out.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not modify other skills or global agent config. It runs as-needed and only performs network I/O and local file read/write under user-invoked commands.
What to consider before installing
This skill's code matches its description and will contact https://api.runware.ai to generate and download images/videos. However:
- The SKILL.md/scripts require a RUNWARE_API_KEY (or --api-key) but the registry metadata does not declare this; expect to supply an API key before use.
- When you pass local image file paths, the scripts will encode and upload the full image data to the Runware API — do not upload private/sensitive images unless you trust the service and its privacy/policy.
- The skill's source and homepage are listed as unknown/none in the registry; verify runware.ai and the author before trusting your API key or sensitive inputs.
- Costs: the scripts include cost reporting and the SKILL.md references pricing; ensure you understand billing on the Runware side to avoid unexpected charges.
If you are comfortable with these points (trusting the vendor, providing an API key, and not uploading sensitive files), the skill looks functionally coherent. If you need stronger assurances, ask the publisher for a verified homepage/source or confirm the Runware service and its privacy/security posture before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk979pjargawzvesv52d6yhqzn980bhtw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
