Giggle Generation Video
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a legitimate Giggle video-generation helper, but it uses your Giggle API key, sends prompts/images to giggle.pro, and remembers task IDs for later status checks.
Before installing, make sure you trust giggle.pro, are comfortable providing a Giggle API key, and are willing to send prompts, image URLs, asset IDs, or base64 image data to that service. Avoid sensitive media or prompts, monitor API usage, and clear saved task IDs if needed.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Your prompts and any provided image references or base64 image data are sent to Giggle's video-generation service when a task is submitted.
The skill directs the agent to run a local Python helper that submits and queries generation tasks through an external API. This is disclosed and central to the video-generation purpose.
Generates AI videos via giggle.pro's Generation API... No polling, no Cron, no file writes—all operations via exec.
Use it only for content you are comfortable sending to giggle.pro, and review model, duration, and frame inputs before submitting generation requests.
The skill can submit and query video-generation tasks using your Giggle account/API quota.
The helper uses the declared Giggle API key as an authentication header for the Giggle API. This is expected for the integration, and no unrelated credential access is shown.
api_key = os.getenv("GIGGLE_API_KEY") ... "x-auth": api_keyUse a dedicated or revocable API key if available, monitor Giggle account usage, and remove or rotate the key when you no longer need the skill.
Task identifiers may remain available to the agent across later interactions and can be reused to check prior generation status.
The skill asks the agent to persist task IDs so it can later query progress. This is scoped to task tracking, but it is still persistent agent memory.
Store task_id in memory (`addMemory`): giggle-generation-video task_id: xxx (submitted: YYYY-MM-DD HH:mm)
Clear the saved memory if the generated content is private or if you do not want old task IDs retained.