Video Craft Pro
PassAudited by ClawScan on May 8, 2026.
Overview
This skill is mostly a coherent video-script/caption/slides helper, but users should notice its optional third-party digital-human/API-key integrations and review those services before use.
This skill appears safe to install as a content-creation helper, but before using the digital-human features, review any separate Coze or provider integration, understand where photos/scripts are sent, and configure API keys with care.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured, third-party API keys may allow the agent to use paid or account-bound video/digital-human services.
The skill says third-party API keys may be needed, even though the registry lists no required credentials. This is expected for optional provider integrations, but users should understand what account authority they grant.
| API Key | 按需配置第三方服务密钥 |
Use least-privilege credentials where possible, review provider billing and permissions, and avoid pasting long-lived secrets directly into prompts.
Photos, likeness data, scripts, or generated media may be handled by external services depending on how the digital-human integration is installed.
The digital-human workflow may process a user-supplied photo or likeness through an external digital-human service. This fits the feature, but the artifact does not define provider data boundaries, retention, or consent handling.
克隆数字人 /path/photo.jpg 名称=智美人
Use only media you have rights and consent to use, and review the selected provider’s privacy, retention, and content-use terms before cloning an avatar.
Installing the separate digital-human service or skill could add permissions, data flows, or costs not visible in this package.
The skill depends on a separately installed Coze-store digital-human component that is outside the provided package. This is disclosed and manual, but it means the full behavior depends on another artifact not reviewed here.
飞影数字人需要从Coze商店安装，本技能仅提供融合编排框架。
Review the Coze-store integration separately, including publisher, permissions, pricing, and data handling, before connecting it to this workflow.
A user might mistakenly believe a provider is installed, free, or already credentialed based on this script’s output.
The file is named like a capability check, but it prints fixed provider status claims rather than actually verifying installation or API-key availability.
状态：已安装（免费版15秒限制） ... 状态：有API Key（0.9元/秒太贵）
Treat this script as informational text only and manually verify provider installation, credentials, limits, and costs.