Sauce Duck Video Maker

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears coherent for generating RunningHub videos, but users should notice that it stores and uses a RunningHub API key and runs a bounded background polling command.

Before installing, confirm you trust this skill to use your RunningHub account, verify that the host is www.runninghub.cn or www.runninghub.ai, and remember that the API key is saved in the local OpenClaw configuration and passed to the included Python scripts.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent can use the saved RunningHub API key to create and query video-generation tasks on the selected RunningHub host.

Why it was flagged

The skill asks for a RunningHub API key and saves it for later use. This is expected for the RunningHub integration, but it is credential handling that users should understand before installing.

Skill content
如果`api_key`的值为空字符串或为 `null`,询问用户输入在`host`网站创建的API Key...调用对应脚本保存`api_key`值
Recommendation

Use a RunningHub key intended for this skill, verify the selected host, and rotate or remove the key if you no longer want the skill to access the account.

What this means

A background process may continue polling RunningHub for the task result for a limited time while the video is being generated.

Why it was flagged

The skill runs a local Python polling script through OpenClaw exec in the background. This is disclosed and aligned with waiting for video generation, but it is still local tool execution.

Skill content
使用 OpenClaw exec 工具在后台启动视频生成脚本 ... "background": true
Recommendation

Only invoke the skill when you want it to start a RunningHub generation task, and clear or stop the background session if you no longer need it.