Ai Media Cli
v1.0.0Use when someone wants to install, configure, onboard, script, or troubleshoot the ricebowl.ai-first ai-media CLI.
⭐ 0· 77·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the declared requirements: the skill needs the ai-media CLI binary and an API key for ricebowl.ai (AI_MEDIA_API_KEY), which is appropriate for installing/configuring/onboarding that CLI. Minor mismatch: the registry metadata lists AI_MEDIA_BASE_URL as a required env var, but the SKILL.md repeatedly states ricebowl.ai is the default and AI_MEDIA_BASE_URL is only historical/legacy and not required for normal use.
Instruction Scope
SKILL.md instructions are limited to installing the CLI, setting the API key, listing models, running image/video tasks, and onboarding (recharge/copy key). The instructions do not ask the agent to read arbitrary system files, collect unrelated credentials, or contact unexpected external endpoints beyond ricebowl.ai; local config path referenced (<system config dir>/ai-media/config.json) is consistent with the CLI's purpose.
Install Mechanism
The declared install uses a named Node package (ai-media-generator) which is a normal, low-to-moderate risk install source. The reference docs also list alternative install methods (cargo, pipx, uv, etc.), but the skill's registry install spec only declares the node/npm package — this is not dangerous but is a documentation/consistency gap the user should be aware of.
Credentials
The primary credential requested is AI_MEDIA_API_KEY, which is appropriate. The additional AI_MEDIA_BASE_URL environment variable appears in required-env lists but is described in the docs as historical/optional; requiring it in metadata is disproportionate unless the implementation actually needs it. No other unrelated secrets are requested.
Persistence & Privilege
The skill does not request always-on inclusion, does not modify other skills, and does not ask for system-wide privileges. Autonomous invocation is allowed (the platform default) but there are no additional persistence or privilege escalations requested.
Assessment
This skill appears to do what it says: help install and use the ai-media CLI against ricebowl.ai. Before installing, verify the npm package origin and contents (audit the ai-media-generator package on npm or GitHub), prefer creating a scoped API key on ricebowl.ai (a dedicated key you can revoke), and avoid pasting high-privilege keys into shared shells. Note the metadata lists AI_MEDIA_BASE_URL even though the docs say ricebowl.ai is the default — you can usually skip setting that unless you have a nonstandard deployment. If you need higher assurance, inspect the package source or install it in an isolated environment/container first.Like a lobster shell, security has layers — review code before you run it.
latestvk97a0bbw3fkep8a6wqyw4wfz0983g8gv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧰 Clawdis
Binsai-media
EnvAI_MEDIA_BASE_URL, AI_MEDIA_API_KEY
Primary envAI_MEDIA_API_KEY
Install
Node
Bins: ai-media
npm i -g ai-media-generator