Dream Text to Video
v1.0.1Generate videos from text using Text to Video (Wan2.1) API. Automatically generates 4-second videos from text descriptions. Powered by Dreamface - AI tools f...
⭐ 0· 405·3 current·3 all-time
byhy@hy-1990
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to call a text-to-video API and only requires a single API key (DREAMTEXTTOVIDEO_API_KEY) and HTTP requests to api.newportai.com. That credential is appropriate for the stated functionality. One minor inconsistency: the README mentions both 'Dreamface' and 'DreamAPI' while the API endpoints point to api.newportai.com; this may be a branding/alias issue but does not itself break capability alignment.
Instruction Scope
SKILL.md contains precise instructions for obtaining and configuring an API key and the two API endpoints to call (submit async job and poll results). It does not instruct the agent to read unrelated files, access other environment variables, or transmit data to endpoints outside the stated API domain.
Install Mechanism
No install spec or code files are included (instruction-only), so nothing is written to disk or downloaded at install time. This minimizes install-time risk.
Credentials
Only one environment variable (DREAMTEXTTOVIDEO_API_KEY) is required and it is declared as the primary credential. That is proportionate for a hosted API integration; no unrelated secrets or system credentials are requested.
Persistence & Privilege
The skill is not forced-always, is user-invocable, and retains no extra privileges. It does not request modifications to other skills or system-wide settings.
Assessment
This skill appears internally consistent: it calls a text-to-video API and needs a single API key. Before installing, verify the API provider and links (api.newportai.com vs. 'Dreamface' branding) so you know who will receive your uploads and billing information. Use a dedicated API key (not a shared or highly privileged key), review the provider's privacy/usage policy for video content handling, and monitor network activity when first using the skill. If you need stronger assurance, request more publisher information or a homepage/source repo from the author before enabling it in production.Like a lobster shell, security has layers — review code before you run it.
latestvk979zfy8z40yj5t348h15kn8w182jw41
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✍️ Clawdis
EnvDREAMTEXTTOVIDEO_API_KEY
Primary envDREAMTEXTTOVIDEO_API_KEY
