AI Video Generation

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only video generation skill is transparent and purpose-aligned, but users should notice that prompts or media may be sent to third-party AI video providers and that preferences may be stored locally.

This skill appears safe to install if you intend to use AI video providers. Before using it, confirm which provider accounts and API keys are available, avoid uploading sensitive media to providers you do not trust, and periodically review the local ~/video-generation/ memory and history files.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If configured, the agent may use your video-provider accounts to create jobs or check configuration for requested video workflows.

Why it was flagged

The skill may use credentials for multiple video-generation providers. This is expected for the stated purpose and is disclosed as optional, but users should understand these accounts may incur costs or access provider workspaces.

Skill content
"env.optional":["OPENAI_API_KEY","GOOGLE_CLOUD_PROJECT","RUNWAY_API_KEY","LUMA_API_KEY","FAL_KEY","REPLICATE_API_TOKEN","VIDU_API_KEY","TENCENTCLOUD_SECRET_ID","TENCENTCLOUD_SECRET_KEY"]
Recommendation

Use dedicated, least-privileged provider keys where possible, monitor spending limits, and remove unused provider credentials from the environment.

What this means

Prompts, uploaded reference images, or clips may be processed by third-party video-generation services.

Why it was flagged

The skill explicitly discloses that video prompts, optional media, and rendering parameters can be sent to external AI providers. This is central to the skill's purpose, but it is still sensitive data sharing.

Skill content
"Data that leaves your machine:" - "Prompt text" - "Optional reference images or clips" - "Requested rendering parameters"
Recommendation

Only use providers you trust with the specific content, and avoid sending confidential or regulated media unless your provider agreement allows it.

What this means

Past project preferences, prompt patterns, and workflow notes may be reused in later video-generation tasks.

Why it was flagged

The skill establishes persistent local memory for provider preferences, active projects, prompt recipes, and workflow notes. This is scoped and disclosed, but users should know it may influence future sessions.

Skill content
Copy this into `~/video-generation/memory.md` on first use.
Recommendation

Review or clear ~/video-generation/memory.md and history.md when switching projects, handling sensitive work, or changing provider preferences.