ClawHub

Phosor AI

v1.0.2

Generate AI videos (text-to-video, image-to-video) with optional custom LoRA styles via the Phosor AI platform. Supports importing images and LoRA models fro...

⭐ 0· 83·0 current·0 all-time
byJason@jasonstarlight
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill name/description (Phosor AI video generation + LoRA support) align with the included CLI and API references. The declared requirements (python3, PHOSOR_API_KEY, PHOSOR_BASE_URL, and a local phosor-pending.json) map to the script's behavior. Minor inconsistency: SKILL.md's requires lists PHOSOR_BASE_URL as required, but the client treats PHOSOR_BASE_URL as optional (defaults to https://phosor.ai).
✓
Instruction Scope
SKILL.md instructs the agent to call the included CLI (scripts/phosor_client.py) for submit/status/result/upload/import operations. The instructions only reference the API key, optional base URL, local pending file, and user-supplied files/URLs (images, .safetensors). There are no instructions to read unrelated system files or other credentials.
✓
Install Mechanism
No install spec is present (instruction-only plus an included Python script). No network downloads or archive extraction during install. The client is stdlib-only and requires python3, which is proportionate for a CLI script.
ℹ
Credentials
Only PHOSOR_API_KEY (primary) and PHOSOR_BASE_URL are declared. PHOSOR_API_KEY is necessary and expected; PHOSOR_BASE_URL is a reasonable optional override but is declared as required in metadata despite being optional in code. The skill writes a local tracking file (phosor-pending.json) under ~/.openclaw/workspace, which is proportional to its job-polling behavior.
✓
Persistence & Privilege
always is false and the skill does not request elevated platform privileges. It writes only its own pending-job file in the user's workspace and does not modify other skills or system-wide agent configuration. The skill can be invoked autonomously (default), which is normal for skills; this combined with a single API key is not excessive.
Assessment
This skill appears to be a straightforward CLI client for phosor.ai and is internally consistent. Before installing: (1) Only provide a PHOSOR_API_KEY you trust—the key is sent as X-API-Key on all requests and will be used/billed by phosor.ai. (2) The CLI will write phosor-pending.json in ~/.openclaw/workspace to track jobs; remove that file if you want no local state. (3) Uploading or importing LoRA (.safetensors) or images will transmit those files or their URLs to Phosor's service—do not upload sensitive data you do not want stored or processed by the external service. (4) If you plan to override PHOSOR_BASE_URL, ensure the endpoint is trusted; note the SKILL.md marks PHOSOR_BASE_URL as required but the client will default to https://phosor.ai if omitted. (5) If you need stronger assurance, review scripts/phosor_client.py (included) to confirm network endpoints and behavior; the code uses urllib and standard HTTPS endpoints documented in references/api.md.

Like a lobster shell, security has layers — review code before you run it.

latestvk973x9bnxkjha5sjhen9p6dt9983frzm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binspython3
EnvPHOSOR_API_KEY, PHOSOR_BASE_URL
Configphosor-pending.json
Primary envPHOSOR_API_KEY

Comments