muapi-cinema-director

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This appears to be a coherent cinematic video-prompt helper, with only expected use of a local script and video-generation provider flow.

This skill looks safe for its stated purpose. Before using it, remember that creative prompts may be submitted to a video-generation service and that the final generation step depends on the platform's core media script. Avoid including confidential or personal information in video briefs.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Creative prompts or subject descriptions may be sent to a video-generation provider, so private or sensitive details in prompts could be exposed to that service.

Why it was flagged

The skill discloses that user creative intent is used for external video-model generation. This is expected for the purpose, but users should know prompt contents may leave the local agent workflow.

Skill content
translates creative intent into technical cinematographic directives for Veo3, Kling, and Luma video models via muapi.ai
Recommendation

Use the skill only with prompts you are comfortable sending to the video provider, and avoid including secrets, personal data, or confidential business details.

What this means

The skill's own script is simple, but actual media generation depends on the referenced core media primitive.

Why it was flagged

The included helper delegates actual video generation to a core script outside this skill's file manifest. That delegation is consistent with the documented purpose, but it means the final provider call is handled by platform code not included in this skill artifact.

Skill content
CORE_SCRIPT="$SCRIPT_DIR/../../../../core/media/generate-video.sh"
Recommendation

Install only in an environment where you trust the platform's core media-generation primitive and review provider/account settings before generating videos.