Video Director
v1.0.1知识类短视频画面规划技能。将枯燥文字转化为高吸引力、高信息密度的图文动画短视频画面，包含名词视觉化和入场动画设计。输出标准JSON格式分镜表供video-producer使用，也可独立使用。
⭐ 0· 78·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (video storyboard/visual planning) align with included artifacts: an instruction-only SKILL.md describing output JSON and a scripts/plan.js that maps nouns to emoji and produces scene JSON. The resources requested (none) are proportional to the stated purpose.
Instruction Scope
SKILL.md strictly describes parsing scripts and producing JSON storyboards and examples for use with a video-renderer; it does not ask for unrelated system data or credentials. However, the SKILL.md contains role-playing instructions and a pre-scan found unicode-control-chars (prompt-injection pattern). That may be an attempt to influence model behavior via hidden characters — not necessarily malicious, but worth manual review of the SKILL.md for invisible characters and any embedded instructions that might override local policy or gather extra context.
Install Mechanism
No install spec; script is instruction-only plus a local Node script. There are no downloads, package installs, or archive extraction in the metadata — low install risk. Running plan.js requires Node but no external installers are requested.
Credentials
The skill declares no required environment variables, no credentials, and no config paths. That is proportional for a content-planning tool that generates static JSON.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or system privileges. It does not indicate modifying other skills or system settings.
Scan Findings in Context
[unicode-control-chars] unexpected: Scanner detected unicode control characters in SKILL.md (prompt-injection pattern). Such characters can hide instructions or affect how LLMs parse text. This is not required for a storyboard generator and should be inspected/removed. Aside from this, no other problematic patterns were reported in the provided excerpts.
Assessment
This skill appears coherent for creating storyboard JSON and includes a local Node script to generate outputs. Before installing/using: 1) Inspect SKILL.md for hidden unicode control characters (e.g., zero-width or direction controls) and remove them if present. 2) Review the full scripts/plan.js content to confirm there are no network requests, telemetry, or calls that read unrelated files; run it locally in an isolated environment first. 3) Do not provide any credentials (none are required). 4) If you plan to allow autonomous invocation, be cautious if you later combine this skill with other skills that have access to secrets or networked renderers — the combination could increase risk. 5) Test with sample inputs and validate outputs before integrating into automated pipelines.Like a lobster shell, security has layers — review code before you run it.
latestvk97bamkjnzq9msqs3eqfhk96yh83ja3t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.