Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Seedance Dreamina 即梦 CLI 视频生成下载工作流
v2026.4.10-1Use when an agent needs Dreamina（即梦） image or video generation through the dreamina CLI.
⭐ 2· 71·0 current·0 all-time
by@l1angjy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and runtime instructions all align: the skill is an instruction-only wrapper for the Dreamina CLI and focuses on submitting/querying image/video generation tasks and checking account state. It does not request unrelated credentials or capabilities.
Instruction Scope
SKILL.md instructs the agent to run dreamina commands, check help, reuse existing login state, run login when needed, and warn about credit consumption. Reusing login state implies the agent may read local CLI session data or configuration, though no explicit paths are named. The instructions do not direct data to external endpoints other than expected Dreamina operations, but you should be aware the agent may access local session files or tokens to operate the CLI.
Install Mechanism
There is no formal install spec, but the instructions recommend running a remote installer via `curl -fsSL https://jimeng.jianying.com/cli | bash`. Piping an external script to bash is inherently risky because it executes remote code without inspection. The hostname appears related to the product, but the skill does not provide a checksum or alternative verified distribution. This is a practical risk to review before following the instruction.
Credentials
The skill declares no required environment variables, credentials, or config paths. This is proportionate to an instruction-only CLI helper. It does instruct reuse of local login state (which is reasonable for a CLI tool) but does not request unrelated secrets.
Persistence & Privilege
The skill is not always-enabled, and it is user-invocable. It does not request to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not accompanied by broad or unexplained privileges.
Assessment
This skill appears to be a straightforward instruction-only helper for the Dreamina CLI and is internally consistent. Before installing or running it: (1) verify the installer URL (https://jimeng.jianying.com/cli) is official and, when possible, inspect the install script instead of piping it directly to bash; (2) be aware that reusing a login state means the agent/CLI will access local session files or tokens—only proceed if you trust the environment and tool; (3) warn users before running commands that will consume paid credits; (4) if you are uncomfortable, manually install the CLI, inspect its documentation, and run commands interactively rather than allowing an agent to run them autonomously.Like a lobster shell, security has layers — review code before you run it.
latestvk975377jgd06r4pnm0yyzte17n84mak5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.