Ai Marketing Videos
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a coherent marketing-video helper, but users should notice that it depends on installing and logging into an external cloud CLI.
This skill appears purpose-aligned and not malicious based on the provided artifacts. Before installing, make sure you trust inference.sh, consider manually verifying the CLI installer, and avoid sending confidential campaign or product information unless you are comfortable with the provider handling it.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user runs the setup command, they execute code from inference.sh outside the reviewed skill artifacts.
The setup directs users to execute a remote installer script for the external CLI. This is central to the skill's purpose and user-directed, but it is still an installer provenance and trust decision.
curl -fsSL https://cli.inference.sh | sh && infsh login
Install only if you trust inference.sh; prefer the documented manual install and checksum verification when possible.
An agent using the skill may run inference.sh commands that consume cloud resources or affect outputs in the user's inference.sh account.
The skill permits Bash calls to the `infsh` CLI. That matches the stated workflow, but it allows a broad set of inference.sh CLI operations rather than narrowly limiting execution to one model.
allowed-tools: Bash(infsh *)
Review generated `infsh` commands before running workflows that may incur cost, upload content, or create media assets.
Generated jobs may use the user's inference.sh account, quotas, or billing arrangement.
The skill expects the user to authenticate to inference.sh. This is appropriate for a cloud generation service, but it means the skill operates through the user's external account context.
infsh login
Use an account with appropriate limits and monitor usage if video generation has associated costs.
Marketing prompts, product descriptions, scripts, or media URLs may be shared with inference.sh and underlying model providers.
The examples submit prompts to external model apps through inference.sh. This is the expected service flow, but user-provided product, brand, or campaign details may leave the local environment.
infsh app run google/veo-3-1-fast --input '{ "prompt": "Sleek product reveal video..." }'Avoid including confidential product plans, unreleased campaign details, or sensitive customer data unless the provider's privacy terms are acceptable.