ClawHub

IMA Studio Sevio AI Generation - Sevio 1.0 ,Sevio 1.0-Fast

v1.0.2

IMA model generation with exactly two Sevio models: Ima Sevio 1.0 and Ima Sevio 1.0-Fast. Supports text-to-video, image-to-video, first-last-frame, and refer...

⭐ 0· 114·0 current·0 all-time
by@allenfancy-gan
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required env var (IMA_API_KEY), and code all point to a single purpose: driving IMA's video-generation APIs and uploading local images. The only required secret is the service API key, which is appropriate for this integration.
ℹ
Instruction Scope
SKILL.md and scripts limit actions to product listing, task creation/polling, and uploading local media when provided. The skill will upload local image files to imapi.liveme.com (obtaining presigned OSS URLs) and pass remote URLs through. It also optionally reads reference files from an optional related skill (~/.openclaw/skills/ima-knowledge-ai/references/*) if that skill is installed; this is documented and optional but worth noting.
✓
Install Mechanism
No install spec; the package is instruction-plus-python-scripts. requirements.txt only requires 'requests'. No remote downloads, URL-shortened installers, or archive extraction are present in the manifest.
✓
Credentials
Only IMA_API_KEY is required. The skill explicitly documents that the key is sent to api.imastudio.com and to imapi.liveme.com for upload-token requests — this credential use is consistent with the task of authenticated API and upload-token calls.
✓
Persistence & Privilege
The skill writes prefs and logs under ~/.openclaw (documented). always:false and normal autonomous invocation are used. The skill does not request system-wide privileges or modify other skills' configs; cross-skill reads are optional and scoped to a single optional skill's reference files.
Assessment
This skill appears to do what it says: it needs an IMA_API_KEY to call api.imastudio.com and to request upload tokens from imapi.liveme.com; if you provide local image files they will be uploaded to IMA's CDN via presigned URLs (domains like *.aliyuncs.com may be used for storage delivery). Review and only provide an API key you trust with those domains. Note logs and preferences are stored under ~/.openclaw (logs auto-deleted after 7 days). If you have concerns about data exfiltration, avoid supplying sensitive images or use a key scoped for only the IMA product. If you want more assurance, inspect the two Python scripts locally (ima_video_create.py and ima_logger.py) before running, and confirm the IMA domains (api.imastudio.com, imapi.liveme.com) are expected by your organization.

Like a lobster shell, security has layers — review code before you run it.

latestvk976fxmcj16ps8q9vptawgw7xs8327c7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvIMA_API_KEY

Comments