ClawHub

DreamAct

v1.0.1

Video-driven face animation using DreamAct API. Animate multiple input images with expressions, lip movements, and head poses from a driving video. Powered b...

⭐ 0· 278·0 current·0 all-time
byhy@hy-1990
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (video-driven face animation) aligns with the required environment variable (DREAMACT_API_KEY) and the API endpoints documented in SKILL.md. No unrelated credentials, binaries, or config paths are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to call api.newportai.com endpoints and to obtain an upload policy for local files (upload to OSS) but is somewhat high-level/vague about the upload steps. It does not instruct the agent to read unrelated files or access other environment variables. The vagueness about how to obtain/use the upload policy is a clarity/usability concern, not an outright security mismatch.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files — nothing is written to disk or downloaded by the skill itself. That minimizes install-time risk.
✓
Credentials
Only a single API key (DREAMACT_API_KEY) is required, which is proportional for a cloud API integration. No other secrets or unrelated environment variables are requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent or system-wide configuration changes. It is user-invocable and can be invoked autonomously by default, which is the platform norm.
Assessment
This skill asks only for a DreamAct API key and then calls api.newportai.com endpoints; verify the API provider (api.newportai.com / tools.dreamfaceapp.com) and read their privacy and terms before sending face images or videos. Only provide an API key you control (preferably with limited scope/quotas), test with non-sensitive images first, and ensure you are comfortable with the legal and ethical implications of animating faces. The SKILL.md is somewhat vague about the 'upload policy/OSS' step — if you need to upload local files, confirm where files are sent and how long they are retained before using real personal data.

Like a lobster shell, security has layers — review code before you run it.

latestvk974b5s6z25enz39d0kr1tycwd82kqbg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎭 Clawdis
EnvDREAMACT_API_KEY
Primary envDREAMACT_API_KEY

Comments