Openclaw Media Gen
PassAudited by ClawScan on May 8, 2026.
Overview
This skill appears to do what it says: use an AIsa API key and a bundled Python client to generate and download images or videos.
Before installing, confirm you trust the AIsa service and are comfortable providing AISA_API_KEY. Review generated-media costs and output file paths when invoking the bundled client.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If installed and invoked, the agent can use the configured AIsa API key to make image or video generation requests, which may consume credits or incur costs.
The skill requires an AIsa API key, which is sensitive account authority and may allow API usage under the user's account.
primaryEnv: AISA_API_KEY ... requires: env: - AISA_API_KEY
Use a scoped or limited API key if available, monitor AIsa usage, and rotate the key if it is exposed.
The skill may create or overwrite user-selected output files when downloading generated images or videos.
The bundled client can download generated media from a URL and write it to a local output path. This is expected for a media-generation client, but it is still local file-write behavior.
def _download_to_file(url: str, out_path: str, timeout_s: int = 300) ... open(out_path, "wb")
Choose output paths intentionally and avoid directing downloads to important existing files unless overwriting is intended.