Dream Talking Image
v1.0.1Generate talking videos from images using Talking Image API. Create talking videos from audio and images, supporting non-human faces like pets or animated ch...
⭐ 0· 255·0 current·0 all-time
byhy@hy-1990
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (generate talking videos from images/audio) matches the SKILL.md which documents calling https://api.newportai.com endpoints. Minor note: marketing links point to tools.dreamfaceapp.com while the API host is api.newportai.com — this is not necessarily malicious but is a slight domain/branding mismatch worth verifying.
Instruction Scope
SKILL.md contains straightforward instructions to POST to the documented API endpoints, set an Authorization header with the declared API key, and poll for results. It does not instruct the agent to read unrelated files, system credentials, or other environment variables. It mentions getting an upload policy for local-file uploads (expected for uploading images/audio) but does not direct arbitrary file-system or credential access beyond the API key.
Install Mechanism
No install spec and no code files are included (instruction-only), so nothing is written to disk or downloaded during install. This is the lowest-risk install profile.
Credentials
Requires a single API key (DREAMTALKINGIMAGE_API_KEY) which is appropriate for an API-integration skill. No other credentials or config paths are requested.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent or elevated system privileges and contains no instructions to modify other skills or system-wide settings.
Assessment
This skill appears coherent, but before installing: verify the API provider (api.newportai.com / Dreamface) is the service you expect, avoid using sensitive or production credentials as the DREAMTALKINGIMAGE_API_KEY, and test with non-sensitive images/audio first. Check the provider's privacy/data-retention and billing terms (uploads may be stored/processed server-side). If the domain/branding mismatch (dreamfaceapp vs api.newportai) worries you, contact the provider or use a dedicated API key you can rotate.Like a lobster shell, security has layers — review code before you run it.
latestvk977z20tp90v564qk33fa0yd7s82kdzz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvDREAMTALKINGIMAGE_API_KEY
Primary envDREAMTALKINGIMAGE_API_KEY
