ClawHub

NewTest白木

v0.0.2

Create AI-narrated film/drama commentary videos via CLI. Two workflow paths (Original & Adapted narration), 100+ movies, 146 BGM tracks, 63 dubbing voices in...

⭐ 0· 35·0 current·0 all-time
bydob6y@4myhime
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description promise (create AI-narrated videos) aligns with required binary (narrator-ai-cli) and declared primary env var (NARRATOR_APP_KEY). The instructions and examples all target the narrator-ai-cli and the Narrator API endpoints; requested items are expected for this functionality.
✓
Instruction Scope
SKILL.md is an instruction-only integration that tells the agent how to call the CLI and the service (upload, create tasks, query, stream). It references the CLI config file (~/.narrator-ai/config.yaml) and environment overrides (NARRATOR_SERVER, NARRATOR_TIMEOUT) which are relevant. It does not instruct reading unrelated system files or exfiltrating unrelated secrets. It also enforces user confirmation for resource selection.
ℹ
Install Mechanism
The skill recommends installing the narrator-ai-cli via pip from a GitHub archive/ git URL — a standard pattern. The package source is GitHub (reasonable), not an unknown personal server. Note: the top-level manifest in the evaluation summary said 'no install spec', but plugin.json and SKILL.md include a pip install spec; this mismatch is minor but worth noting because installation will fetch and install third-party code.
✓
Credentials
Only one required credential (NARRATOR_APP_KEY) is declared as primary and is appropriate for an API-driven CLI. SKILL.md mentions optional overrides (NARRATOR_SERVER, NARRATOR_TIMEOUT) but does not require additional unrelated secrets or keys.
✓
Persistence & Privilege
always:false (no forced global install). The skill stores its own config at ~/.narrator-ai/config.yaml (permission 0600); this is reasonable for a CLI-based integration. The skill does not request system-wide powers or modification of other skills.
Assessment
This skill appears internally consistent for controlling the narrator-ai-cli. Before installing or providing an API key: 1) Verify the narrator-ai-cli GitHub repo and the referenced release/tag to ensure you trust the code that pip will install. 2) Limit the API key's permissions and rotate it if possible; the CLI stores the key in ~/.narrator-ai/config.yaml (SKILL.md says perms 0600) so check that file and its permissions. 3) If you do not want your agent to install packages autonomously, install the CLI manually in a controlled environment and keep the skill instruction-only. 4) Note the minor metadata mismatch (skill display name vs plugin.json) and the presence of contact info — these are not harmful but worth verifying the publisher identity. If you need higher assurance, inspect the pip package source locally before installation.

Like a lobster shell, security has layers — review code before you run it.

latestvk9720at41dvmjsere663f2y3q184tnmd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Binsnarrator-ai-cli
EnvNARRATOR_APP_KEY
Primary envNARRATOR_APP_KEY

Comments