Script + Custom Media

Render a video from a script using only the media assets the caller provides (no stock visuals). Use for branded content where every frame must be on-brand —...

Security Scan

The skill's requests and instructions line up with its stated purpose (rendering a video on revid.ai using user-provided media) and it only needs a single Revid API key; no other unexplained access or install activity is present.

Purpose & Capability

The skill is a thin integration with Revid's render API and declares the single required config REVID_API_KEY. The example scripts and SKILL.md show only calls to revid.ai and handling of provided media URLs, which matches the description.

Instruction Scope

Runtime instructions are limited to validating provided asset URLs, POSTing a render request to Revid, and polling status. They do not instruct reading unrelated local files or exfiltrating other secrets. The SKILL.md explicitly enforces flags that prevent stock fill to satisfy the "only provided media" requirement.

Install Mechanism

No install spec (instruction-only) — lowest risk. Minor note: the provided example run.sh uses curl and jq but the skill metadata does not declare required binaries; users should ensure those tools are available in their environment.

Credentials

Only REVID_API_KEY is required, which is appropriate for a service that calls Revid's API. No unrelated credentials or broad environment access are requested.

Persistence & Privilege

always is false and the skill does not request persistent system presence or modify other skills/settings. Autonomous model invocation is allowed (platform default) but is not combined with broad privileges here.

Assessment

This skill is coherent with its stated purpose, but before installing: 1) Confirm you trust revid.ai — the skill sends your media URLs and the API key to https://www.revid.ai. 2) Keep your REVID_API_KEY secret and scoped as tightly as possible; rotate it if leaked. 3) Ensure provided media URLs are publicly reachable (signed URLs are OK but must not expire mid-render). 4) The example run.sh requires curl and jq — make sure those are available or adapt the script. 5) If you require stricter privacy, avoid sending links to private buckets or PII in the payload. 6) Verify the two "useOnlyProvided" flags are set (as the SKILL.md recommends) to prevent stock content from being added. If you want further assurance, review Revid's privacy/processing policy or test with non-sensitive media first.

Script + your own media → branded video

For when the user has the script and the visuals. Revid only handles voice + captions + assembly. No stock content is mixed in.

When to use this skill

• The user has both a script and a set of clips/images they want used.
• Brand fidelity matters more than visual variety.
• For mixed (your media + stock to fill gaps), drop media.useOnlyProvided and use revid-script-to-video with media.provided.

Inputs

Field	Required	Notes
text	yes	The script
media.provided[]	yes	At least 3 items recommended; URLs must be public
aspectRatio	no	Default 9:16
voiceId	no	Default voice if omitted

MediaItem shape:

{ "url": "https://…", "type": "image" | "video" | "audio", "title": "optional", "noReencode": false }

Use type: "image" for stills (Revid will optionally pan/zoom them via media.turnImagesIntoVideos). Use type: "video" for clips. Keep clip duration roughly comparable to the script length.

Step-by-step

1. Validate every media.provided[].url returns 200 and a video/image content-type.
2. Confirm enough assets for the script: rough rule = 1 asset per 8–10 s of script, minimum 3.
3. POST /render with media.useOnlyProvided: true.
4. Poll /status.

API call template

POST /api/public/v3/render
Host: www.revid.ai
Content-Type: application/json
key: $REVID_API_KEY

{
  "workflow": "script-to-video",
  "source": {
    "text": "{SCRIPT}"
  },
  "aspectRatio": "9:16",
  "voice":    { "enabled": true, "voiceId": "aria-en-us", "stability": 0.6, "speed": 1.0 },
  "captions": { "enabled": true, "position": "middle", "autoCrop": true },
  "music":    { "enabled": true, "syncWith": "beats" },
  "media": {
    "type": "custom",
    "useOnlyProvided": true,
    "turnImagesIntoVideos": true,
    "mergeVideos": false,
    "animation": "soft",
    "provided": [
      { "url": "https://cdn.example.com/clip-1.mp4", "type": "video" },
      { "url": "https://cdn.example.com/clip-2.mp4", "type": "video" },
      { "url": "https://cdn.example.com/hero.jpg",   "type": "image" }
    ]
  },
  "options": {
    "summarizationPreference": "no-summarization",
    "useOnlyProvidedMedia": true,
    "soundEffects": false,
    "hasToGenerateCover": true
  },
  "render": { "resolution": "1080p", "frameRate": 30 }
}

Both media.useOnlyProvided and options.useOnlyProvidedMedia should be true — they belong to slightly different paths in the legacy code and setting both is the safest way to forbid stock fill.

Examples

• examples/branded-script.json
• examples/run.sh

Failure modes

Symptom	Fix
Final video pads with stock anyway	One of the two flags wasn't honored. Make sure both media.useOnlyProvided: true AND options.useOnlyProvidedMedia: true are set.
Video too short / dead air	Not enough assets. Add more provided items or set mergeVideos: true to loop the existing clips.
Wrong asset on a particular line	Pre-order assets in the array roughly in narrative order — Revid uses array order as a hint.
Asset URL 403 / 404	Make sure assets are public (signed URLs work as long as they don't expire mid-render).

See also

• revid-script-to-video for stock visuals.
• revid-shopify-product-promo for the product-page variant.