ClawHub

CreatOK Analyze Video

v0.1.5

Use when analyzing a TikTok video or breaking down its script and structure.

⭐ 0· 297·0 current·0 all-time
by@newt0n
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill's name/description (TikTok video analysis) aligns with the code: it posts {tiktok_url} to CreatOK's /api/open/skills/analyze endpoint, receives transcript/vision data, and writes structured artifacts. The required binary (node) and single primary credential (CREATOK_API_KEY) are appropriate for this integration. One minor inconsistency: the SKILL.md metadata lists requires.env: [] while a primaryEnv (CREATOK_API_KEY) is declared — the code requires the key.
✓
Instruction Scope
Runtime instructions and code stay within scope: they take a TikTok URL, call the CreatOK analyze API, and write transcripts/vision/outputs into the skill's .artifacts/<run_id> folder. The skill does not read system files or unrelated environment variables, nor does it contact unexpected endpoints beyond creatok.ai.
✓
Install Mechanism
No install script is provided (instruction-only + shipped JS files). The skill requires node to run. There are no downloads from untrusted URLs or archive extraction. This is a low-risk install model, though code files are included and executed by node at runtime.
ℹ
Credentials
The skill only needs one credential (CREATOK_API_KEY), which is proportional to its purpose. However, registry/manifest metadata earlier listed 'Required env vars: none' while the code enforces the presence of CREATOK_API_KEY — this discrepancy should be corrected so users know the key is required.
✓
Persistence & Privilege
The skill is not marked always:true, does not modify other skills, and does not request persistent elevated privileges. It writes artifacts only under its own .artifacts directory.
Assessment
What to consider before installing: - This skill sends the TikTok URL (and CreatOK receives whatever content they fetch/process from that URL) to https://www.creatok.ai. If the video is private or contains sensitive content, do not share it. - You must provide a valid CREATOK_API_KEY in your environment; the code will throw an error without it (the SKILL.md metadata mistakenly lists no required env vars — treat the API key as required). - The skill only needs Node and one API key; it writes outputs under <skill>/.artifacts/<run_id> and does not read other system files or credentials. - Verify the CreatOK domain/account and review their privacy/terms if you care about where video/audio/transcript data is processed or stored. - If you want higher assurance, ask the skill author for a public homepage, documentation, or a signed package/source provenance before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk971yf8b6byvardc3h08xzxrds849rrz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

Binsnode
Primary envCREATOK_API_KEY

Comments