Kling
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears to do what it claims: it sends user prompts to Kie.ai to generate Kling videos, but users should notice it uses a Kie.ai API key and may consume account credits.
This looks like a straightforward Kie.ai/Kling video-generation wrapper. Before installing, make sure you trust the skill owner, set KIE_API_KEY only if you want the skill to use your Kie.ai account, and avoid sending private client or campaign information in prompts unless that is acceptable for your Kie.ai usage.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Running the generation commands can use the user's Kie.ai account and may consume credits.
The skill uses a Kie.ai API key to authenticate requests. This is necessary for the stated provider integration, but it gives the skill access to the user's Kie.ai account capabilities.
const API_KEY = process.env.KIE_API_KEY; ... 'Authorization': `Bearer ${API_KEY}`Only install and run this with a Kie.ai API key you are comfortable using, and monitor credit usage.
Prompts are sent to Kie.ai and video jobs are created on the user's account.
The skill can create remote video-generation jobs through the provider API. This is aligned with its purpose, but it is an external account action rather than a local-only operation.
const response = await client.post('/jobs/createTask', payload);Review prompts before generating videos, especially if they include confidential campaign, client, or testimonial details.
Users have less external information to confirm who maintains the skill or where it originated.
The package provenance is not easily verifiable from the provided metadata, even though the included code is small and purpose-aligned.
Source: unknown; Homepage: none
Prefer installing from trusted owners or verify the included files before providing an API key.