Al Video Generation
v1.0.3Use this skill as an entry point to discover, select, and fetch specific integration parameters for all supported AI video generation models.
⭐ 2· 233·0 current·0 all-time
byShortAPl@isdyh01
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to discover and fetch model-specific integration parameters for ShortAPI-hosted video models and requests only a SHORTAPI_KEY. The declared env var and the documented endpoints (shortapi.ai / api.shortapi.ai) align with that purpose.
Instruction Scope
The SKILL.md instructs the agent to GET a model-specific Markdown schema from https://shortapi.ai/api/skill/<model_id> and then POST a payload to https://api.shortapi.ai/api/v1/job/create with a Bearer token. This stays within the stated scope, but it relies on fetching and parsing external Markdown at runtime (the instructions explicitly prohibit hallucinating parameters). Ensure the agent maps SHORTAPI_KEY to the Authorization header and that fetched schemas are treated as untrusted input.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk or downloaded by an install step, which minimizes install-time risk.
Credentials
Only one env var is required (SHORTAPI_KEY), which is proportional to a service-integration skill. There are no unrelated credentials or config paths requested.
Persistence & Privilege
always is false and the skill does not request system-wide privileges or modify other skills. disable-model-invocation is false (normal); autonomous invocation is allowed by platform default but does not, by itself, indicate extra privilege.
Scan Findings in Context
[no_code_files] expected: The static scanner found no code files; this is expected because the skill is instruction-only (SKILL.md provides runtime instructions). There are therefore no regex-based code findings to evaluate.
Assessment
This skill appears internally consistent: it only needs SHORTAPI_KEY to call ShortAPI endpoints and instructs the agent to fetch model-specific schemas before constructing requests. Before installing, confirm you trust https://shortapi.ai (check its docs, privacy, and billing terms), use a limited-scope API key if possible, and avoid sending sensitive data (prompts, images, or assets) you don't want transmitted to an external service. Also verify that the agent will use the SHORTAPI_KEY as the Authorization Bearer token and that fetched Markdown schemas are parsed safely (treat remote content as untrusted). If you want extra assurance, ask the publisher for a security/privacy statement or example responses from /api/skill/<model_id> so you can confirm what data is returned and logged.Like a lobster shell, security has layers — review code before you run it.
latestvk9719s6vqcrmqxajbfkesd6g5d8396ek
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvSHORTAPI_KEY