AI Video Generation
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: video-generation Version: 1.0.1 The video-generation skill bundle is a comprehensive set of documentation and architectural guidelines designed to help an AI agent navigate various third-party video generation APIs (e.g., OpenAI Sora, Google Veo, Runway). It includes model routing logic, async API patterns, and local state management via a dedicated directory (~/video-generation/). The skill does not contain executable code, obfuscation, or instructions for data exfiltration; it explicitly advises against storing secrets in project files and limits external communication to legitimate AI provider endpoints listed in SKILL.md.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If configured, the agent may use your video-provider accounts to create jobs or check configuration for requested video workflows.
The skill may use credentials for multiple video-generation providers. This is expected for the stated purpose and is disclosed as optional, but users should understand these accounts may incur costs or access provider workspaces.
"env.optional":["OPENAI_API_KEY","GOOGLE_CLOUD_PROJECT","RUNWAY_API_KEY","LUMA_API_KEY","FAL_KEY","REPLICATE_API_TOKEN","VIDU_API_KEY","TENCENTCLOUD_SECRET_ID","TENCENTCLOUD_SECRET_KEY"]
Use dedicated, least-privileged provider keys where possible, monitor spending limits, and remove unused provider credentials from the environment.
Prompts, uploaded reference images, or clips may be processed by third-party video-generation services.
The skill explicitly discloses that video prompts, optional media, and rendering parameters can be sent to external AI providers. This is central to the skill's purpose, but it is still sensitive data sharing.
"Data that leaves your machine:" - "Prompt text" - "Optional reference images or clips" - "Requested rendering parameters"
Only use providers you trust with the specific content, and avoid sending confidential or regulated media unless your provider agreement allows it.
Past project preferences, prompt patterns, and workflow notes may be reused in later video-generation tasks.
The skill establishes persistent local memory for provider preferences, active projects, prompt recipes, and workflow notes. This is scoped and disclosed, but users should know it may influence future sessions.
Copy this into `~/video-generation/memory.md` on first use.
Review or clear ~/video-generation/memory.md and history.md when switching projects, handling sensitive work, or changing provider preferences.