Dlazy Kling V3

Powerful video generation with Kling v3. Supports high-quality text-to-video and image-to-video.

Security Scan

The skill is internally consistent with a thin CLI client for the dLazy Kling v3 video service — required binaries, config locations, and network endpoints match the stated purpose; no unrelated permissions or credentials are requested.

Purpose & Capability

The name/description, required binaries (npm, npx), declared CLI package (@dlazy/cli), and the referenced endpoints (api.dlazy.com, oss.dlazy.com) all align with a video-generation CLI client. No unrelated services or credentials are requested.

Instruction Scope

SKILL.md instructs the agent to run the dlazy CLI and explains that local media paths will be uploaded to the provider's storage (expected for a cloud generation service). This means user-provided files and prompts will be transmitted to dlazy; the skill does not ask the agent to read unrelated system files or other credentials. Note: the SKILL explicitly instructs the agent to inform users about billing/keys when certain API errors occur — benign but prescriptive.

Install Mechanism

The registry lists this as instruction-only, but SKILL.md metadata includes an explicit npm install (npm install -g @dlazy/cli@1.0.6) and an npx alternative. Installing an npm package from the public registry is a reasonable, proportionate method for a CLI client, but carries the normal supply-chain risk; the SKILL recommends reviewing the GitHub source before installing. Also note a minor mismatch between the skill's published version and the pinned CLI version in metadata.

Credentials

No required environment variables are declared; the skill documents the optional DLAZY_API_KEY environment variable and CLI-based auth which is appropriate and proportional. The only config path referenced (~/.dlazy/config.json) is the CLI's user config file — expected for storing an API key.

Persistence & Privilege

always is false and the skill does not request system-wide privileges. The CLI will persist the API key to the user's config directory (normal behavior). Autonomous invocation is allowed (platform default) but not combined with any broad unexplained privileges.

Assessment

This skill appears to be a legitimate thin client for the dLazy Kling v3 service, but follow these precautions before installing or running it: 1) Review the GitHub repo and the referenced npm package (@dlazy/cli@1.0.6) before doing a global install; prefer npx for one-off runs to avoid installing a global binary. 2) Treat your DLAZY_API_KEY as a secret — the CLI stores it in ~/.dlazy/config.json; verify that file's permissions and rotate the key if you suspect compromise. 3) Understand that any local images/videos you pass will be uploaded to dlazy's storage (oss.dlazy.com) — do not upload sensitive personal or proprietary content. 4) Be aware of billing: the skill will surface 'insufficient_balance' errors and direct users to a payment page. 5) The SKILL.md contains an install command in its metadata despite being listed as instruction-only in the registry; confirm which install method will be executed by your environment. If you need higher assurance, inspect the npm package contents or run the CLI in an isolated environment (container / dedicated VM) before using with sensitive data.

English · 中文

Powerful video generation with Kling v3. Supports high-quality text-to-video and image-to-video.

Trigger Keywords

• kling v3
• generate video
• text to video, image to video

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy kling-v3 command to get results.

dlazy kling-v3 -h

Options:
  --prompt <prompt>                    Prompt
  --generation_mode <generation_mode>  Generation Mode [default: frames] (choices: "frames", "components")
  --images <images...>                 Images [image: url or local path] (max 4) [default: ]
  --subjects <subjects...>             Subjects (max 3) [hidden when generation_mode="frames"]
  --aspect_ratio <aspect_ratio>        Aspect Ratio [default: 16:9] (choices: "16:9", "9:16", "1:1")
  --duration <duration>                Duration (s) [default: 5] (choices: "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15")
  --mode <mode>                        Mode [default: std] (choices: "std", "pro")
  --sound <sound>                      Sound Effect [default: false]
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy kling-v3 --prompt 'prompt text' --image '/path/to/image.png'

# complex call:
dlazy kling-v3 --prompt 'prompt text' --image 'https://oss.dlazy.com/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.