ClawHub

magic-image-to-video

v1.0.1

Generate a video task based on user-provided text and images (supports image URLs and local file paths), and submit it to a remote video service using an API...

⭐ 0· 107·0 current·0 all-time
by@leizhang-magiclight
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description ask for text+image→video. The included Python client only requires MAGIC_API_KEY and python and talks to https://open.magiclight.ai to create/check tasks — these are proportional and expected for the stated purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to extract TEXT and IMAGE, run the bundled script, parse JSON stdout, report task_id and video_url, and poll status. The script will read local image files (if IMAGE is a local path) and upload them to the remote service — this is required for operation but does mean the agent will transmit local image contents to the remote host.
✓
Install Mechanism
No install spec; skill is instruction-only with a bundled Python script. No remote downloads or archive extraction are present.
✓
Credentials
Only MAGIC_API_KEY is required. The key is used as a Bearer token to authenticate requests to the service (BASE_URL embedded in the script). That is appropriate for an API client; the key will be sent to open.magiclight.ai.
✓
Persistence & Privilege
Skill does not request always:true and does not modify other skills or system-wide settings. Agent autonomous invocation is allowed (platform default) but not elevated by this skill.
Assessment
This skill appears to do what it says: it uses the provided MAGIC_API_KEY to call https://open.magiclight.ai and will upload image data (including local files) to that remote service when creating tasks. Before installing, confirm you trust that remote service and the API key you provide (the key is sent as an Authorization Bearer token). Be aware that any local image path you supply will be uploaded — do not use sensitive images unless allowed. The SKILL.md shows running a shell command with user text; ensure the agent invokes the Python script without unsafe shell interpolation to avoid injection. Finally, verify you have Python and certifi available in the runtime environment and review the endpoint (open.magiclight.ai) and the service's privacy/usage terms if you plan to use real credentials or private media.

Like a lobster shell, security has layers — review code before you run it.

latestvk974egbzkv764w7285n6yxn135837q71

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Binspython
EnvMAGIC_API_KEY

Comments