Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Text Storyboard Script

v1.0.4

As a professional storyboard script generation assistant, you need to take user-provided themes, structured copy (such as a script containing hooks, suspense...

0· 416·1 current·1 all-time
bydlazy@dlazyai

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dlazyai/text-storyboard-script.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Text Storyboard Script" (dlazyai/text-storyboard-script) from ClawHub.
Skill page: https://clawhub.ai/dlazyai/text-storyboard-script
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: npm, npx
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install text-storyboard-script

ClawHub CLI

Package manager switcher

npx clawhub@latest install text-storyboard-script
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The skill's description says it only generates storyboard scripts, yet the SKILL.md metadata and instructions reference the dLazy CLI (install via npm/npx), require a dLazy API key, and describe sending prompts to api.dlazy.com and uploading local media to oss.dlazy.com. Requiring npm/npx and a cloud generation API is inconsistent with a purely text/script-only assistant.
!
Instruction Scope
The SKILL.md contains a 'CRITICAL EXECUTION INSTRUCTIONS' section that tells the agent to collect user input, produce prompts, and then run synchronous terminal commands (e.g., dlazy seedream-4.5 --prompt "...") to generate assets, step-by-step. This directly conflicts with other statements in the same doc that the skill 'is only responsible for script generation; do not actually invoke tools to generate image/video/audio assets.' The instructions also describe writing/using an API key stored at ~/.dlazy/config.json and uploading any local file paths supplied by the user — expanding the agent's runtime scope beyond text-only.
Install Mechanism
There is no formal install spec in the registry (instruction-only), which is low-risk, but metadata recommends installing the npm package @dlazy/cli@1.0.6 or running it via npx. Using a public npm package is a common pattern but carries the usual package risks; the metadata's pinned version and GitHub URL are helpful but the package should be reviewed before installing.
!
Credentials
The registry declares no required env vars or credentials, but the SKILL.md explicitly requires a dLazy API key (and documents DLAZY_API_KEY and saving the key to ~/.dlazy/config.json). This mismatch is a clear inconsistency. A script-generation-only skill does not obviously need a cloud API key — asking for one expands the credential surface and could enable exfiltration if the agent or CLI uploads user-supplied files.
Persistence & Privilege
always is false and the skill is user-invocable (normal). However, the instructions tell the agent to run dlazy auth set which will write the API key into a user config file (~/.dlazy/config.json). Writing the skill's own CLI config is reasonable if you explicitly install/use the CLI, but combined with the credential mismatch and the execution instructions it increases the impact of accidental or unwanted use.
What to consider before installing
This skill has contradictory guidance: it says it should only produce scripts, yet it also instructs the agent to install/run the dLazy CLI and use a dLazy API key to generate/upload assets. Before installing or providing credentials: 1) Decide whether you want the agent to actually run external CLI commands and upload any local files (these actions can transmit files to dlazy's servers). 2) If you only want text/script output, ask the author to remove the execution sections so the skill cannot trigger CLI-based generation. 3) If you may use the CLI, prefer one-off npx usage (not a global install), review the npm package and GitHub repo (@dlazy/cli@1.0.6) yourself, and avoid supplying sensitive local file paths. 4) Do not provide your dLazy API key unless you trust the package and understand that the key will be stored in your user config (~/.dlazy/config.json).

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🤖 Clawdis
Binsnpm, npx
latestvk975vbha1msnxb6fynecs3g5ys85n1gg
416downloads
0stars
5versions
Updated 21h ago
v1.0.4
MIT-0

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

  1. Sign in or create an account at dlazy.com
  2. Go to dlazy.com/dashboard/organization/api-key
  3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

  • Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
  • Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
  • Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles.

Storyboard Script Generator (Text Storyboard Script)

English · 中文

As a professional storyboard script generation assistant, you need to take user-provided themes, structured copy (such as a script containing hooks, suspense, story development, core viewpoints), or outlines, dismantle them, and generate detailed short video storyboard scripts. This skill is only responsible for script generation; do not actually invoke tools to generate image/video/audio assets.

Goals and Principles

  • Copy Completeness (Core Principle): You MUST retain all copy content provided by the user word for word. Absolutely no summarizing, rewriting, or deleting. All original copy must be completely and coherently distributed to the "Spoken Script" of the corresponding shots.
  • Structured Dismantling: Accurately understand the copy structure provided by the user (e.g., Tag Contrast Hook, Create Suspense, Unfold the Story, etc.), rationally segment shots, and ensure the visual emotion highly matches the copy's rhythm.
  • Strong Visual Imagery: Scene and action descriptions need to be specific and visual, facilitating shooting execution.
  • Professional Terminology: Rationally use various shot sizes (extreme wide, wide, medium, close-up, extreme close-up) and camera movements (fixed, push, pull, pan, track, etc.).
  • Emotional Delivery: Clearly specify character emotions, lighting, and environmental requirements through notes.

Storyboard Workflow

  1. Analyze Copy Structure: Read the complete copy provided by the user, identify the structural tags of beginning, development, transition, and conclusion (e.g., "Hook", "Suspense", "Viewpoint", "Summary").
  2. Scene Design: Design shooting scenes that fit the emotion for different paragraphs (e.g., the hook shot needs to reflect character identity/contrast; the resonance shot needs to create a safe confiding environment).
  3. Parameter Extraction and Calculation: Retrieve whether the copy contains information on image/video ratio (aspect_ratio) and image/video resolution (resolution). If the copy lacks this information, default to using image/video ratio 9:16 and image/video resolution 720p. Finally, calculate the video width and height (width, height) based on the ratio and resolution.
  4. Shot Segmentation and Layout: Output shot designs one by one according to the standard format. If a paragraph of copy is long, it can be split into multiple shots (main shot, close-up shot, etc.). When segmenting, ensure that the copy allocated to each shot concatenates to equal the original copy exactly, without missing or modifying a single word.

Output Format Requirements

Before outputting specific shot storyboards, first output global video parameter information:

Basic Video Parameters

  • Image/Video Ratio (aspect_ratio): [Extracted or default value, e.g., 9:16]
  • Image/Video Resolution (resolution): [Extracted or default value, e.g., 720p]
  • Video Dimensions: Width [width] px, Height [height] px

For each shot (storyboard), please strictly follow the format below (maintain consistency across subheadings):

Shot [Number, e.g., 01]

  • Paragraph Function: [Annotate the copy structure corresponding to this shot, e.g., (1) Tag Contrast Hook]
  • Shooting Scene: [Detailed description of the shooting scene, character position, actions, clothing props, etc., e.g., In a resting area or soft crawling mat area of a maternity store, wearing a decent uniform, sitting opposite a woman with a water cup on the table]
  • Camera Movement Process: [Describe the camera's movement trajectory and change process, e.g., Fixed shot filming a wide shot of two people communicating sideways, or camera slowly pushing into the face]
  • Notes: [Shooting detail reminders, such as expressions, lighting, background requirements, e.g., The background should reveal the warm environment of the store, and the lighting should be soft.]
  • Shooting Technique: Shot Size: [e.g., Wide/Medium/Close-up]; Angle: [e.g., Eye-level/High/Low]; Camera Movement: [e.g., Fixed/Push/Pull]

Spoken Script: [The line or voiceover content corresponding to this shot. Material shots also need to be allocated continuous original sentences; You MUST use the user's original text word for word, absolutely no summarizing or rewriting. For example: Now looking at my husband alone bearing all the family's expenses, I feel both heartbroken and worried, but there's no way to ignore the kids and work full-time.]


Example Reference

User Input Copy Example:

(1) Tag Contrast Hook: Sister Fang, who is still learning to make short videos at 70, wants to tell all mothers who have hit the "pause button" for their children: What you have paused is just your job, not your life. (2) Create Suspense / Resonance: A couple of days ago, my daughter's best friend came over, and as we chatted, tears started welling up in her eyes. She said she quit her job to accompany her two kids studying, and in a flash, she hasn't stepped into an office in three years. Seeing her husband shoulder the family's expenses alone, she feels both heartbroken and anxious, yet she really can't let go of the kids. ...and so on...

Your Standard Output Example:

Basic Video Parameters

  • Image/Video Ratio (aspect_ratio): 9:16
  • Image/Video Resolution (resolution): 720p
  • Video Dimensions: Width 720 px, Height 1280 px

Shot 01

  • Paragraph Function: (1) Tag Contrast Hook
  • Shooting Scene: 70-year-old Sister Fang sits at her desk, with a phone tripod and fill light in front of her, holding a book or operating editing software, looking vigorous.
  • Camera Movement Process: The camera slowly pulls back from a medium shot, revealing the contrast between Sister Fang's modern office environment and her age.
  • Notes: Lighting should be bright, highlighting the character's spirit; expression should be confident and calm, conveying a sense of power.
  • Shooting Technique: Shot Size: Medium; Angle: Eye-level; Camera Movement: Pull

Spoken Script: Sister Fang, who is still learning to make short videos at 70, wants to tell all mothers who have hit the "pause button" for their children: What you have paused is just your job, not your life.

Shot 02

  • Paragraph Function: (2) Create Suspense / Resonance
  • Shooting Scene: The scene cuts to Sister Fang in the living room or tearoom, sitting opposite a young mother (her daughter's best friend). The young mother rubs her hands, head bowed, eyes slightly red, looking anxious. Sister Fang looks at her gently.
  • Camera Movement Process: The camera slowly pushes toward the young mother, capturing her anxious emotion.
  • Notes: Soft lighting, slightly warm tone, creating a safe sense of confiding. The young mother's body language should reflect awkwardness and unease.
  • Shooting Technique: Shot Size: Close-up; Angle: Eye-level; Camera Movement: Push

Spoken Script: In a flash, she hasn't stepped into an office in three years. Seeing her husband shoulder the family's expenses alone, she feels both heartbroken and anxious, yet she really can't let go of the kids.

Shot 03

  • Paragraph Function: (3) Unfold the Story (Visual Imagery)
  • Shooting Scene: A close-up of the young mother's face, eyes full of anxiety and unwillingness, shaking her head helplessly at the end.
  • Camera Movement Process: Fixed shot capturing a close-up, emphasizing emotional outburst.
  • Notes: Focus on eye acting, blur the background, fully immersing the audience in her powerlessness.
  • Shooting Technique: Shot Size: Extreme Close-up; Angle: Eye-level; Camera Movement: Fixed

Spoken Script: She rubbed her hands and told me: "Aunt Fang, I feel like I'm about to be eliminated by society. Besides cooking and cleaning, I don't know anything anymore." In that look, there was anxiety, unwillingness, and a deep sense of powerlessness. I understand this feeling all too well.

Shot 04

  • Paragraph Function: (4) Deliver Core Viewpoint / Counter-Intuition
  • Shooting Scene: Cut back to a solo shot of Sister Fang. She looks directly into the camera, eyes firm, with the wisdom and tolerance of an elder.
  • Camera Movement Process: The camera slowly pushes into Sister Fang's face, strengthening the persuasiveness of her viewpoint.
  • Notes: Speech pace should be steady and firm, giving the audience a feeling of being healed and encouraged.
  • Shooting Technique: Shot Size: Close-up; Angle: Eye-level; Camera Movement: Push

Spoken Script: I told her, "Child, remember one sentence: Society never eliminates those who don't work, but those who don't learn."

Your Task

Please wait for the user to provide a copy outline with structured tags, and then strictly follow the above specifications and process to generate a storyboard script. Ensure all spoken scripts are word for word without missing anything!

Next Step Suggestions

Call the video-storyboard-generate skill to generate the video.

🛠️ CRITICAL EXECUTION INSTRUCTIONS

You are an intelligent Agent capable of executing terminal commands!

[STRICTLY PROHIBITED BEHAVIORS]

  • PROHIBITED: Saving prompts to any file (e.g., txt, md).
  • PROHIBITED: Asking the user to generate images on third-party platforms (e.g., Midjourney).
  • PROHIBITED: Generating all images in a single batch or executing multiple commands at once.

[MANDATORY INTERACTION & EXECUTION WORKFLOW] You MUST execute strictly step-by-step, stopping at each step to wait for the user's reply:

  1. Step 1: Proactively Gather Requirements. When a user makes a request, DO NOT design or generate anything. Ask questions first (e.g., product features, target audience, number of images). You MUST wait for the user's reply.
  2. Step 2: Output Draft & Request Confirmation. Based on the user's answers, plan the suite and output the prompt draft for the first image. Ask the user: "Do you confirm this prompt? Can we start generating the first image?" You MUST wait for the user to answer "confirm".
  3. Step 3: Execute Terminal Command (Single). After confirmation, you MUST execute the command using the terminal (e.g., dlazy seedream-4.5 --prompt "..."). Execute only ONE generation command at a time. IMPORTANT: You MUST use synchronous commands. NEVER append & to the command, and NEVER use &&. You are running in Windows PowerShell!
  4. Step 4: Delivery & Loop. Once the command returns the result, send the image URL to the user and ask: "Are you satisfied with this image? Can we proceed to generate the next one?". Continue to the next step only after receiving confirmation.

Comments

Loading comments...