Ai Video Generation

This skill appears consistent with a CLI wrapper for an AI video generation service, but take these precautions before installing or providing credentials: - Verify the npm package and GitHub repository: confirm the package name (ai-media-generator) and homepage (https://github.com/214140846/ai-media-generator) are legitimate, well-maintained, and match the expected author. - Inspect the package contents or source before installing: review the package's install scripts and the ai-media binary source to ensure no unexpected postinstall scripts or behaviors. - Limit API key scope and rotate keys: create an API key with the minimum required permissions and an expiry if the service supports it. Do not reuse broader cloud credentials. - Test in a sandbox environment first: run the CLI in an isolated environment (container or VM) to observe network calls and filesystem writes. - Confirm AI_MEDIA_BASE_URL: ensure it points to the official service domain and not an attacker-controlled endpoint. - Note the missing reference docs: SKILL.md points to ../ai-media-cli/references/* files that are not included; request those docs or validate command behavior via the CLI's --help before relying on defaults. If you cannot verify the npm package or the repository owner, consider treating the install as higher risk and decline or demand more provenance before proceeding.