Dream Image to Video
v1.0.1Generate videos from images using Image to Video (Wan2.1) API. Automatically generates 4-second videos from text descriptions and images. Powered by Dreamfac...
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the declared requirement (DREAMIMAGETOVIDEO_API_KEY) and the SKILL.md describes calls to api.newportai.com image-to-video endpoints. No unrelated credentials, binaries, or install steps are requested.
Instruction Scope
SKILL.md instructs the agent to call NewportAI endpoints, obtain upload policies for local file uploads, and poll for async results. This is within the expected scope for an image→video API. Note: uploading local files and the openclaw config patch will transmit data (images/prompts and the API key) to external services—expected for this kind of skill but important for privacy.
Install Mechanism
No install spec and no code files are included (instruction-only). That minimizes local code execution risk; nothing is downloaded or written by the skill itself.
Credentials
Only one required env var (DREAMIMAGETOVIDEO_API_KEY) is declared and used as the primary credential, which is proportionate for an external API integration. The SKILL.md does not reference other secrets or system config paths.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated platform privileges. The SKILL.md shows a recommended openclaw config patch to store the API key in agent config — expected but the user should verify config storage/access controls.
Assessment
This skill is coherent with its stated purpose, but it will transmit your images, prompts, and the API key to a third-party endpoint (api.newportai.com / tools.dreamfaceapp.com). Before installing: 1) Verify you trust NewportAI/Dreamface and review their privacy/billing policies. 2) Use a dedicated, limited-scope API key (rotate/revoke if needed). 3) Be cautious about uploading sensitive images or PII. 4) Understand that running the suggested openclaw config patch stores the API key in your agent configuration—confirm who can access that config. If you need stronger guarantees, test with non-sensitive data and confirm the endpoint/domain are legitimate.Like a lobster shell, security has layers — review code before you run it.
Runtime requirements
🎞️ Clawdis
EnvDREAMIMAGETOVIDEO_API_KEY
Primary envDREAMIMAGETOVIDEO_API_KEY
latest
Dream Image to Video (Wan2.1) - Image to Video
Generate 4-second videos from text prompts and images.
Quick Start
1. Get API Key
Before using this skill, you need a DreamAPI API key. Visit https://api.newportai.com/api-reference/get-started to sign up and get your API key.
For more AI tools, please visit: https://tools.dreamfaceapp.com/home
2. Configure API Key
openclaw config patch --json '{"skills": {"entries": {"dream-image-to-video": {"env": {"DREAMIMAGETOVIDEO_API_KEY": "your-api-key-here"}}}}}'```
### 3. Usage
#### Parameters:
- **prompt**: Text description, max 1500 characters
- **image**: Image URL
- **resolution** (optional): "480p" or "720p", default "480p"
## API Details
### 1. Get Upload Policy (for local files)
Upload your local files to OSS first (get upload policy, then upload).
### 2. Image to Video API
POST https://api.newportai.com/api/async/wan/image_to_video/2.1
### 3. Polling for Result
POST https://api.newportai.com/api/getAsyncResult
## Implementation Notes
- Generates 4-second videos
- Prompt max 1500 characters
- Supports 480p and 720p
- Status: 0=pending, 1=processing, 2=processing, 3=completed, 4=timeout
Comments
Loading comments...
