AI短视频脚本生成器

Key points to consider before installing or running this skill: - Hardcoded secrets: The repository contains plaintext API keys for SkillPay and SiliconFlow. Although both are used for expected functions (billing and AI), hardcoded keys are unsafe. Do not run this code unless you either replace those keys with your own and keep them secret, or modify the code to read keys from environment variables. - Automatic billing: By default TEST_MODE is False. The application will call the billing API in a before_request hook and may attempt to charge the user for most endpoints. If you test, set TEST_MODE=True or inspect/replace the billing key and endpoints first. - Network calls to external services: The skill will contact skillpay.me and api.siliconflow.cn. Verify those services are trustworthy for your use case and that you want your prompts/data sent to them. - Local persistence: The app writes scripts to data/scripts.db in the skill directory. Make sure you are comfortable storing generated content locally and that file permissions are appropriate. - Remediation suggestions: Ask the author to remove secrets from code and declare required env vars (or do it yourself). Prefer environment-based configuration for API keys, enable TEST_MODE for local testing, and review/rotate any exposed keys. If you don't trust the embedded keys or the payment provider, do not run the skill; instead host the code locally with your own credentials in environment variables. - If unsure: run the code in an isolated sandbox or container, monitor outbound network traffic, and inspect billing calls before providing real payment credentials.