AI media generation- Flux2pro,Google Veo3.1, Suno Ai..
v1.0.12AI image, video, and music generation + editing via VAP API. Flux, Veo 3.1, Suno V5.
⭐ 10· 3.2k·6 current·6 all-time
byVAP Media automation flow@elestirelbilinc-sketch
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description claim unified image/video/music generation via VAP and the SKILL.md exclusively issues curl requests to api.vapagent.com endpoints for generation and editing — this aligns with the declared purpose. Required binary is only curl, which is appropriate. One minor mismatch: registry-level metadata (shown to you) listed 'source unknown / homepage none', while the SKILL.md includes metadata pointing to a GitHub repo and vapagent.com; verify that those links are legitimate.
Instruction Scope
Runtime instructions are focused on composing prompts, selecting endpoints, polling task status, and returning media URLs. The instructions do not ask the agent to read arbitrary local files, other environment variables, or unrelated system configuration. All network calls are to api.vapagent.com as expected.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only and only requires curl to be present. This minimizes on-disk risk.
Credentials
The SKILL.md uses an optional VAP_API_KEY to enable 'Full Mode' but the registry's declared required env vars list is empty. Requiring an API key for full functionality is reasonable, but the missing declaration is an inconsistency you should confirm (is VAP_API_KEY optional or required for some operations?). No unrelated secrets or extra credentials are requested.
Persistence & Privilege
The skill does not request 'always: true' or any elevated persistence. It is user-invocable and allows autonomous invocation (platform default), which is expected for skills of this type.
Assessment
This skill appears to be a straightforward, instruction-only wrapper around vapagent.com's API. Before installing: (1) verify the SKILL.md's source/homepage (https://vapagent.com and the GitHub repo) match a real, trusted project; (2) confirm whether you want to provide a VAP_API_KEY (required for full features and billing) and only set it if you trust the provider; (3) avoid uploading private or sensitive media to the service if you have confidentiality concerns; (4) check the provider's terms/billing — the SKILL.md mentions tiered limits and payment errors (401/402/403). The only incoherence found is that the registry metadata didn't list VAP_API_KEY as an optional env var while the instructions use it — that is likely benign but worth confirming with the publisher.Like a lobster shell, security has layers — review code before you run it.
latestvk9787h8hv09bg2g07v9jpq985d80ye0z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Binscurl