manga-animation
v1.0.0完整的漫剧（动画漫画）生成工作流 skill。当用户想要：创作漫画剧集、生成动画短片、制作分镜脚本、设计原创角色、生成动漫风格视频片段、将故事想法转化为可视化内容，或任何涉及"漫剧""动漫创作""分镜""人设""画风设定""AI生成动画""参考图生成"的请求时，必须使用此 skill。 流程覆盖：剧本创作 → 分...
⭐ 2· 230·0 current·0 all-time
by徐京徽@a574824551
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name, description, SKILL.md, and included scripts all align: they implement a multi-stage manga/animation pipeline (script → storyboard → character prompts → image generation → video generation) using the Volcengine/Ark APIs. One mismatch: the skill metadata in the registry claims no required environment variables, but the runtime docs and both scripts clearly require ARK_API_KEY for API authentication.
Instruction Scope
SKILL.md gives explicit stage-by-stage instructions and mandates pausing for user confirmation between stages. The instructions direct the agent and the operator to run the provided scripts, update CHARACTER_PROMPTS in call_image_api.py, and populate storyboard.json; they do not instruct reading unrelated system files or exfiltrating secrets. The scripts read/write only project files (storyboard.json, output/*, generation_log.json) and call the Ark API.
Install Mechanism
There is no automated install spec; the skill is instruction + Python scripts and requires the public Python packages 'volcengine-python-sdk[ark]' and 'requests' (installed via pip). No downloads from unknown URLs or archive extraction are present. This is a low-risk, typical requirement for a scripts-based skill.
Credentials
Only one credential is used at runtime: ARK_API_KEY (the scripts look for it in the environment or as a hardcoded variable). That is proportionate to the stated purpose. However, the registry metadata did not list required env vars while the documentation and scripts require ARK_API_KEY — this mismatch should be resolved before install so users know an external API key is mandatory.
Persistence & Privilege
The skill does not request 'always: true' and does not modify other skills or global agent configuration. It performs normal file I/O in its own workspace (output/, storyboard.json) and requires manual edits to CHARACTER_PROMPTS for character images; nothing in the package implies elevated or hidden persistence.
Assessment
This skill appears to implement exactly what it claims: a multi-stage manga/animation pipeline that calls Volcengine/‘Ark’ image and video APIs. Before installing/running: 1) Be aware you must supply an ARK_API_KEY (the registry metadata omitted this); the scripts will exit if it's not set. 2) The scripts will send your prompts, images (embedded as base64), and storyboard data to the Ark service (https://ark.cn-beijing.volces.com/api/v3) — only do this if you trust the service and accept associated cost/privacy implications. 3) The workflow updates and writes local files (storyboard.json, output/*, generation_log.json) and requires you to edit call_image_api.py to populate CHARACTER_PROMPTS if you want automatic character generation — modifying the script is expected but pay attention to not accidentally check secrets into source control. 4) Inspect the two included Python scripts before running, run them in an isolated environment if you want to limit blast radius, and ensure your ARK_API_KEY is stored securely (avoid committing it). 5) If you need the skill metadata corrected (so the platform reflects the ARK_API_KEY requirement), ask the publisher or avoid use until it's fixed.Like a lobster shell, security has layers — review code before you run it.
latestvk975pezckc03c2kzk4503xtn8n834yzq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.