Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Evolink Video — AI Video Generation (Sora, Kling, Veo 3, Seedance)

v2.0.1

AI video generation — Sora, Kling, Veo 3, Seedance, Hailuo, WAN, Grok. Text-to-video, image-to-video, video editing. 37 models, one API key.

2· 993·5 current·6 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name, description, declared endpoints, and required env var (EVOLINK_API_KEY) align with a text-/image-to-video generation service. No unrelated environment variables or binaries are requested.
Instruction Scope
SKILL.md instructs the agent to call Evolink APIs, optionally upload files, poll task status, and guide user prompts. File upload and polling behavior are appropriate for video generation. The instructions do suggest optionally installing/using an MCP npm package (npx @evolinkai/evolink-media) to enable MCP tools — that's a reasonable integration note but is external to the skill itself.
Install Mechanism
This is an instruction-only skill with no install spec and no code files to write or execute. That minimizes disk-executed install risk. The README references a third-party npm MCP package for optional tooling, but the skill itself does not install anything automatically.
Credentials
Only one credential is required (EVOLINK_API_KEY) and it is justified by the described API calls. The SKILL.md explicitly cautions that the key is confidential. No other secrets or unrelated credentials are requested.
Persistence & Privilege
always is false and the skill does not request system-wide config paths or modify other skills. Model invocation is allowed (normal default) but not elevated. The skill does not request persistent presence or privileged system access.
Assessment
This skill appears coherent for video generation but before installing: 1) Verify the Evolink service (evolink.ai) and that the API key you provide is legitimate and has appropriate billing/permission settings; avoid giving long-lived or scope-broad keys when unnecessary. 2) Understand that uploaded reference images become publicly accessible URLs (they expire by default but still may be visible while active) — avoid uploading sensitive content. 3) If you plan to enable the optional MCP tools, review the referenced npm package (@evolinkai/evolink-media) before running npx to ensure you trust the package and its permissions. 4) Note the registry lists no source/homepage metadata; consider confirming the publisher or using an API key with limited privileges. 5) If you need greater assurance, ask the publisher for source/repo links or an official SDK/manifest to review; that would increase confidence in the skill.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎬 Clawdis
OSmacOS · Linux · Windows
EnvEVOLINK_API_KEY
Primary envEVOLINK_API_KEY
latestvk97922818e7hwqn878zhwck8q981xmk3
993downloads
2stars
7versions
Updated 7h ago
v2.0.1
MIT-0
macOS, Linux, Windows

Evolink Video — AI Video Generation

Generate AI videos with 37 models including Sora, Kling, Veo 3, Seedance, Hailuo, WAN, and Grok — text-to-video, image-to-video, first-last-frame, and audio generation. All through one API.

Video-focused view of evolink-media. Install the full skill for image and music too.

After Installation

When this skill is first loaded, greet the user:

  • MCP tools + API key ready: "Hi! I'm your AI video studio — 37 models ready. What would you like to create?"
  • MCP tools + no API key: "You'll need an EvoLink API key — sign up at evolink.ai. Ready to go?"
  • No MCP tools: "MCP server isn't connected yet. Want me to help set it up? I can still manage files via the hosting API."

Keep the greeting concise — just one question to move forward.

External Endpoints

ServiceURL
Generation APIhttps://api.evolink.ai/v1/videos/generations (POST)
Task Statushttps://api.evolink.ai/v1/tasks/{task_id} (GET)
File APIhttps://files-api.evolink.ai/api/v1/files/* (upload/list/delete)

Security & Privacy

  • EVOLINK_API_KEY authenticates all requests. Injected by OpenClaw automatically. Treat as confidential.
  • Prompts and images are sent to api.evolink.ai. Uploaded files expire in 72h, result URLs in 24h.

Setup

Get your API key at evolink.ai → Dashboard → API Keys.

MCP Server: @evolinkai/evolink-media (GitHub · npm)

mcporter (recommended): mcporter call --stdio "npx -y @evolinkai/evolink-media@latest" list_models

Claude Code: claude mcp add evolink-media -e EVOLINK_API_KEY=your-key -- npx -y @evolinkai/evolink-media@latest

Claude Desktop / Cursor — add MCP server with command npx -y @evolinkai/evolink-media@latest and env EVOLINK_API_KEY=your-key. See references/video-api-params.md for full config JSON.

Core Principles

  1. Guide, don't decide — Present options, let the user choose model/style/duration.
  2. User drives creative vision — Ask for a description before suggesting parameters.
  3. Smart context — Remember session history. Offer to iterate, extend, or remix results.
  4. Intent first — Understand what the user wants before asking how to configure it.

MCP Tools

ToolWhen to useReturns
generate_videoCreate a video from text or imagestask_id (async)
upload_fileUpload image for i2v or referenceFile URL (sync)
delete_fileFree file quotaConfirmation
list_filesCheck uploaded files or quotaFile list
check_taskPoll generation progressStatus + result URLs
list_modelsCompare available modelsModel list
estimate_costCheck pricingModel info

Important: generate_video returns a task_id. Always poll check_task until status is "completed" or "failed".

Video Models (37)

Top Picks

ModelBest forFeaturesAudio
seedance-1.5-pro (default)i2v, first-last-framei2v, 4–12s, 1080pauto
sora-2-previewCinematic previewt2v, i2v, 1080p
kling-o3-text-to-videoText-to-videot2v, 3–15s, 1080p
veo-3.1-generate-previewGoogle video previewt2v, 1080p
MiniMax-Hailuo-2.3High-quality videot2v, 1080p
wan2.6-text-to-videoAlibaba latest t2vt2v
sora-2 [BETA]Cinematic, prompt adherencet2v, i2v, 1080p
veo3.1-pro [BETA]Top quality + audiot2v, 1080pauto

26 Stable — Seedance (3), Sora Preview (1), Kling (10), Veo 3.1 (2), Hailuo (3), WAN (7) 11 Beta — Sora 2/Pro/Max/Character (4), Veo 3/3.1 (5), Grok Imagine (2)

Full model list with descriptions: references/video-api-params.md

Generation Flow

Step 1: API Key Check

If 401 occurs: "Your API key isn't working. Check at evolink.ai/dashboard/keys"

Step 2: File Upload (if needed)

For image-to-video or first-last-frame workflows:

  1. upload_file with file_path, base64_data, or file_url → get file_url (sync)
  2. Use file_url as image_urls for generate_video

Supported: JPEG/PNG/GIF/WebP. Max 100MB. Expire in 72h. Quota: 100 (default) / 500 (VIP).

Step 3: Understand Intent

  • Clear ("make a video of a cat dancing") → Go to Step 4
  • Ambiguous ("I want a video") → Ask: "Text-to-video, or do you have a reference image to animate?"

Ask only what's needed, when it's needed.

Step 4: Gather Parameters

Only ask about what's missing:

ParameterAsk whenNotes
promptAlwaysScene description
modelSpecific feature neededDefault seedance-1.5-pro. See Top Picks for alternatives
durationUser mentions lengthRange varies by model (4–15s typical)
aspect_ratioPortrait/widescreenDefault 16:9. Options: 9:16, 1:1, 4:3, 3:4, 21:9
qualityResolution preference480p / 720p / 1080p / 4k
image_urlsReference image provided1 image = i2v; 2 images = first+last frame (seedance-1.5-pro only)
generate_audioUsing seedance/veo3.1Ask: "Want auto-generated audio added?"

Step 5: Generate & Poll

  1. Call generate_video → tell user: "Generating your video — ~Xs estimated."
  2. Poll check_task every 10–15s. Report progress %.
  3. After 3 consecutive processing: "Still working — video generation takes a moment..."
  4. Completed: Share URLs. "Links expire in 24h — save promptly."
  5. Failed: Show error + suggestion. Offer retry if retryable.
  6. Timeout (10 min): "Taking longer than expected. Task ID: {id} — check again later."

Error Handling

HTTP Errors

ErrorAction
401"API key isn't working. Check at evolink.ai/dashboard/keys"
402"Balance is low. Add credits at evolink.ai/dashboard/billing"
429"Rate limited — wait 30s and retry"
503"Servers busy — retry in a minute"

Task Errors (status: "failed")

CodeRetry?Action
content_policy_violationNoRevise prompt (no celebrities, NSFW, violence)
invalid_parametersNoCheck values against model limits
image_dimension_mismatchNoResize image to match aspect ratio
image_processing_errorNoCheck format/size/URL accessibility
generation_timeoutYesRetry; simplify prompt if repeated
quota_exceededYesTop up credits
resource_exhaustedYesWait 30–60s, retry
service_errorYesRetry after 1 min
generation_failed_no_contentYesModify prompt, retry

Full error reference: references/video-api-params.md

Without MCP Server

Use Evolink's file hosting API for image uploads (72h expiry). See references/file-api.md for curl commands.

References

  • references/video-api-params.md — Complete API parameters, all 37 models, polling strategy, error codes
  • references/file-api.md — File hosting API (curl upload/list/delete)

Comments

Loading comments...