Dlazy Seedream 4.5

Generate smooth, high-quality videos with Doubao Seedream 4.5. Supports text-to-video and image-to-video.

Security Scan

The skill is an instruction-only wrapper that directs the agent to use the official-looking dLazy CLI (via npm/npx) to call api.dlazy.com and upload assets to oss.dlazy.com — the requested binaries and actions are proportionate to its stated purpose.

Purpose & Capability

The name/description (text-to-video / image-to-video using Seedream 4.5) aligns with the instructions to invoke a CLI client and with the declared need for npm/npx to install/run that client. Required binaries (npm, npx) are appropriate for a Node.js CLI client.

Instruction Scope

The SKILL.md instructs the agent to run the dlazy CLI which will send prompts to api.dlazy.com and upload local media files to oss.dlazy.com — this is expected for a cloud video-generation client. NOTE: the agent is explicitly told to upload local files; the user should avoid passing sensitive files unless they accept the provider's storage/retention/privacy terms. The skill's instructions do not ask the agent to read unrelated system files or secrets.

Install Mechanism

The skill is instruction-only (no install spec in registry), but the SKILL.md metadata recommends installing @dlazy/cli@1.0.6 via npm or running via npx. Using npx/npm will fetch code from the npm registry at runtime — standard but moderately risky if the package or its registry account is untrusted. The SKILL.md points to a GitHub repo to review before installing, which is good practice.

Credentials

The registry metadata lists no required env vars, but the documentation correctly explains that an API key (DLAZY_API_KEY or via dlazy auth set) is required for API calls and will be stored in ~/.dlazy/config.json. Asking for a service API key is proportional; the minor mismatch (no required env var declared in registry) is informational rather than malicious.

Persistence & Privilege

The skill does not request always:true or other elevated platform privileges. It does expect the user/agent to install/run an external CLI but does not demand permanent platform-wide privileges or modify other skills' configs.

Assessment

This skill is coherent with its stated purpose, but before using it: 1) review the referenced GitHub repo and the npm package (@dlazy/cli@1.0.6) to ensure they are legitimate; 2) prefer running with npx for one-off use instead of a global install unless you trust the package; 3) be aware any local images/videos you pass will be uploaded to oss.dlazy.com — avoid uploading sensitive material and review dlazy.com's privacy/retention policy; 4) the CLI requires an API key stored in ~/.dlazy/config.json (rotate/revoke keys if needed); and 5) be cautious when granting network access to an externally downloaded CLI—inspect code if you need high assurance.

English · 中文

Generate smooth, high-quality videos with Doubao Seedream 4.5. Supports text-to-video and image-to-video.

Trigger Keywords

• doubao seedream 4.5
• generate video
• text to video, image to video

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy seedream-4.5 command to get results.

dlazy seedream-4.5 -h

Options:
  --prompt <prompt>                    Prompt
  --images <images...>                 Images [image: url or local path] (max 10) [default: ]
  --resolution <resolution>            Resolution [default: 2k] (choices: "2k", "4k")
  --size <size>                        Size [default: 16:9] (choices: "1:1", "4:3", "3:4", "16:9", "9:16", "3:2", "2:3", "21:9")
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy seedream-4.5 --prompt 'prompt text' --image '/path/to/image.png'

# complex call:
dlazy seedream-4.5 --prompt 'prompt text' --image 'https://oss.dlazy.com/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.