Dlazy Wan2.6 R2v Flash

Quickly generate dynamic short videos from reference images using Wan 2.6 Flash.

Security Scan

The skill appears to implement a legitimate video-generation CLI client, but its metadata omits the required API credential and config path information and has minor inconsistencies that you should review before installing or running it.

Purpose & Capability

The name/description (generate short videos from reference images) aligns with the instructions to run the dlazy CLI and with the declared npm package @dlazy/cli. Requiring npm/npx to run the CLI is reasonable. However, the skill's registry metadata lists no required credentials while the SKILL.md explicitly requires a dLazy API key and references a config file (~/.dlazy/config.json) and service endpoints — this mismatch is noteworthy.

Instruction Scope

The SKILL.md instructs the agent to run a specific CLI command (dlazy wan2.6-r2v-flash) and documents options. It explicitly states that local image/video/audio paths supplied by the user will be uploaded to dlazy's media storage (oss.dlazy.com) and that prompts are sent to api.dlazy.com — these behaviors are consistent with a cloud SaaS client and remain within the stated purpose. The instructions do not ask the agent to read arbitrary system files or unrelated credentials.

Install Mechanism

This is an instruction-only skill (no install spec in the registry), which is the lowest risk from an install perspective. The skill metadata does include a recommended install command (npm install -g @dlazy/cli@1.0.6) and an npx alternative, which are reasonable. Because the registry didn't perform an install, the agent would need npm/npx available to run npx or to install the package — consider using npx to avoid globally installing unknown code and review the GitHub repo before installing.

Credentials

The SKILL.md states that a dLazy API key is required and indicates it can be stored in ~/.dlazy/config.json or passed via DLAZY_API_KEY, but the registry metadata lists no required environment variables and 'Required config paths' is empty. This omission is a mismatch: a credential is in practice required but not declared. The skill will upload files you pass to a third-party service; do not pass sensitive files or credentials to it. Confirm you trust dlazy.com and the npm package before providing an API key.

Persistence & Privilege

The skill does not request always:true and does not claim elevated platform privileges. The CLI stores its own API key in a per-user config file (~/.dlazy/config.json) according to SKILL.md — this is normal for a CLI client. There's no evidence the skill would modify other skills or system-wide settings.

What to consider before installing

This skill calls an external CLI (npm/@dlazy/cli) which in turn uploads any images or media you pass to dlazy's servers and requires a dLazy API key. Before installing or running it: (1) verify the npm package and GitHub repo (https://github.com/dlazyai/cli) to ensure the code is reputable; (2) prefer running via npx to avoid global installs; (3) do not feed sensitive files or other credentials as inputs because they will be uploaded to oss.dlazy.com; (4) note the CLI stores your API key at ~/.dlazy/config.json — review that file and its permissions after use; (5) be aware the registry metadata did not declare the API key or config path even though the SKILL.md requires them — treat that omission as a red flag and confirm you trust dlazy.com and the package maintainer before proceeding.

English · 中文

Quickly generate dynamic short videos from reference images using Wan 2.6 Flash.

Trigger Keywords

• wan 2.6 flash
• fast reference image to video
• generate video

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy wan2.6-r2v-flash command to get results.

dlazy wan2.6-r2v-flash -h

Options:
  --prompt <prompt>                    Prompt
  --generation_mode <generation_mode>  Generation Mode [default: components] (choices: "components")
  --images <images...>                 Images [image: url or local path] (max 10)
  --size <size>                        Size [default: 720*1280] (choices: "1280*720", "720*1280", "960*960", "1088*832", "832*1088", "1920*1080", "1080*1920", "1440*1440", "1632*1248", "1248*1632")
  --duration <duration>                Duration (s) [default: 5] (choices: "2", "3", "4", "5", "6", "7", "8", "9", "10")
  --shotType <shotType>                Shot Type [default: single] (choices: "single", "multi")
  --watermark <watermark>              Watermark [default: false] (choices: "true", "false")
  --audio <audio>                      Audio [default: false] (choices: "true", "false")
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy wan2.6-r2v-flash --prompt 'prompt text' --image '/path/to/image.png'

# complex call:
dlazy wan2.6-r2v-flash --prompt 'prompt text' --image 'https://oss.dlazy.com/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.