Dlazy Jimeng Dream Actor

Convert static character images into vivid action videos with Jimeng Dream Actor.

Security Scan

The skill is a thin CLI client for a cloud service (dlazy) and its declared requirements and runtime instructions are largely consistent with that purpose, with a few small documentation/metadata mismatches you should review before installing.

Purpose & Capability

Name/description (image→video via Jimeng Dream Actor) match the instructions: the skill is a thin npm CLI wrapper that calls api.dlazy.com and uploads media to oss.dlazy.com. Requiring npm/npx is appropriate for an npm-distributed CLI.

Instruction Scope

SKILL.md instructs agents to run the dlazy CLI, to upload local media to oss.dlazy.com, and to require a dLazy API key. Those actions are within the stated scope. The file contains agent-specific directives (e.g. mandatory messaging on insufficient_balance / unauthorized) that are operational but not overbroad. Minor issue: SKILL.md references DLAZY_API_KEY and ~/.dlazy/config.json even though the skill registry did not declare required env vars.

Install Mechanism

This is instruction-only (no install spec in registry), and the metadata suggests installing a pinned npm package or using npx. Using npm/npx for a CLI is proportionate and low-risk. Small inconsistency: the skill package pinned in metadata is @dlazy/cli@1.0.6 while the skill version is 1.0.5—confirm which package version you will actually run.

Credentials

The skill legitimately requires a dLazy API key (described in SKILL.md) but the registry metadata lists no required env vars / primary credential. The CLI also stores the key in ~/.dlazy/config.json or accepts DLAZY_API_KEY; this is expected but the registry should declare that. No other unrelated credentials or paths are requested.

Persistence & Privilege

always:false (not force-installed) and no attempt to modify other skills or system-wide settings. The CLI will persist its own config under the user's home (~/.dlazy/config.json), which is normal for a user-level CLI.

Assessment

This appears to be a normal thin client for a cloud service. Before installing or running it: 1) Prefer ephemeral use (npx) if you don't want a global binary. 2) Inspect the npm package and GitHub repo (https://github.com/dlazyai/cli) and verify the package version (metadata pins @dlazy/cli@1.0.6 while the skill lists version 1.0.5). 3) Be aware the CLI uploads any local images/videos you pass to dlazy's storage (oss.dlazy.com) — do not send private or sensitive images unless you accept that. 4) The CLI stores your API key in ~/.dlazy/config.json (or you can use DLAZY_API_KEY); rotate or revoke the key if compromised. 5) If you need higher assurance, ask the publisher for a signed release or review the CLI source code before running npm install -g. These checks will reduce risk and address the minor metadata/env inconsistencies noted above.

English · 中文

Convert static character images into vivid action videos with Jimeng Dream Actor.

Trigger Keywords

• jimeng dream actor
• image to video
• make image move
• action video

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy jimeng-dream-actor command to get results.

dlazy jimeng-dream-actor -h

Options:
  --prompt <prompt>                    Prompt
  --images <images...>                 Images [image: url or local path] (max 1)
  --videos <videos...>                 Videos [video: url or local path] (max 1)
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy jimeng-dream-actor --prompt 'prompt text' --image '/path/to/image.png'

# complex call:
dlazy jimeng-dream-actor --prompt 'prompt text' --image 'https://oss.dlazy.com/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.