Ai Video Generation

PassAudited by ClawScan on May 1, 2026.

Overview

This skill is a coherent AI video-generation wrapper for the inference.sh CLI, with user-noticeable setup, login, and external media-processing considerations.

This looks appropriate for its stated purpose. Before installing, verify the inference.sh CLI installer, log in only with the account you intend to use, review any costs or quotas, and avoid sending sensitive images, audio, video, or private URLs unless you trust the service handling them.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Running the setup command would execute installer code from inference.sh on the user's machine.

Why it was flagged

The skill tells users to install a remote CLI installer before use. This is aligned with the stated CLI-based purpose, but it relies on a remote installation source that is not included as an install spec artifact.

Skill content
curl -fsSL https://cli.inference.sh | sh && infsh login
Recommendation

Install only if you trust inference.sh, prefer the documented manual install/checksum verification path, and review any optional related skill installs separately.

What this means

The CLI may act under the user's inference.sh account and could consume service access or credits when generating media.

Why it was flagged

The setup flow includes logging into inference.sh. That is expected for a hosted AI inference service, but users should recognize that account authorization may be needed even though the registry metadata lists no primary credential.

Skill content
infsh login
Recommendation

Use the intended inference.sh account, understand any costs or quotas, and avoid sharing account access with untrusted agents or environments.

What this means

Private prompts, images, videos, or audio URLs provided to the CLI could be processed by external services.

Why it was flagged

The examples pass prompts and media URLs to external inference.sh apps and model providers. This is central to video generation, but it means user-provided media or links may leave the local environment.

Skill content
infsh app run bytedance/omnihuman-1-5 --input '{ "image_url": "https://portrait.jpg", "audio_url": "https://speech.mp3" }'
Recommendation

Do not submit sensitive or private media unless you are comfortable with inference.sh and the relevant model provider handling it; review their privacy and retention terms.