Open Animate
PassAudited by ClawScan on May 1, 2026.
Overview
Open Animate appears purpose-aligned for creating videos and media, but users should notice that it installs/runs an npm CLI, may require an oanim login, and can use cloud or external AI media services.
This skill is coherent for video and animation creation. Before installing, confirm you trust the `oanim` npm package, understand that some workflows may require `oanim login`, and avoid using confidential prompts or media with cloud rendering or external AI model generation unless that is acceptable.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing the skill may cause the agent or user to install and execute code from the npm `oanim` package.
The skill installs and runs an npm-provided CLI package. This is expected for a creative video tool, but the artifacts do not pin a package version or include the CLI source.
install:\n - kind: node\n package: oanim\n bins:\n - oanim
Install only if you trust the package publisher/source, and consider reviewing the npm package details before use.
AI asset generation may use the user's logged-in oanim account and any permissions, quotas, or billing associated with it.
The asset-generation workflow uses an oanim platform login, implying account/session use even though the registry metadata lists no primary credential.
Sign in to the oanim platform:\n```bash\noanim login\n```
Use a dedicated account or check oanim account permissions and billing expectations before enabling asset generation.
Video briefs, prompts, images, audio, or project files could leave the local machine when using cloud rendering or AI asset generation.
The skill discloses cloud rendering and external AI model use. These are purpose-aligned, but prompts, generated assets, or project content may be sent to external services.
| Cloud rendering | `oanim render --cloud` |\n| Any fal.ai model | `oanim assets run` |
Avoid using private or confidential media/prompts with cloud or external model commands unless you are comfortable with the provider's data handling.