Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Multishot UGC

v1.0.1

Generate 10 perspective/angle variations from a single image for multi-shot UGC videos. ✅ USE WHEN: - Have a hero image and need camera angle variations - Creating multi-scene UGC videos (need different shots) - Want close-ups, wide shots, side angles from one source - Building a video with scene changes ❌ DON'T USE WHEN: - Don't have a hero image yet → use morpheus-fashion-design first - Need completely different scenes/locations → use Morpheus multiple times - Just need one image → skip this step - Want to edit images manually → use nano-banana-pro INPUT: Single image (person with product) OUTPUT: 10 PNG variations with different perspectives TYPICAL PIPELINE: Morpheus → multishot-ugc → select best 4 → veed-ugc each → Remotion edit

5· 1.1k·2 current·2 all-time
byPaul de Lavallaz@pauldelavallaz

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for pauldelavallaz/multishot-ugc.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Multishot UGC" (pauldelavallaz/multishot-ugc) from ClawHub.
Skill page: https://clawhub.ai/pauldelavallaz/multishot-ugc
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install pauldelavallaz/multishot-ugc

ClawHub CLI

Package manager switcher

npx clawhub@latest install multishot-ugc
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
The SKILL.md and scripts implement a multishot image-generation flow that queues a ComfyDeploy deployment and downloads outputs — this aligns with the described purpose. However the registry metadata lists no required environment variables or primary credential while the script requires a COMFY_DEPLOY_API_KEY; that metadata omission is a mismatch.
Instruction Scope
Instructions and the included script only perform actions relevant to the task: optionally upload a local image, queue a deployment, poll for completion, and download images. SKILL.md does not disclose that an API key is required (the script does), which is an important omission for runtime behavior.
Install Mechanism
No install spec is provided (instruction-only with small helper script and pyproject). There is a declared Python dependency (requests) in pyproject.toml, but nothing is automatically downloaded or executed by an install step in the registry metadata.
!
Credentials
The code requires a single environment secret (COMFY_DEPLOY_API_KEY) to call api.comfydeploy.com; that credential is proportionate to the stated purpose. The concern is that the skill metadata did not declare this required env var or a primary credential, which is a visibility/consent issue and may surprise users. No unrelated credentials are requested.
Persistence & Privilege
The skill does not request permanent 'always' presence, does not modify other skills or system-wide settings, and is user-invocable only. It runs network calls to the declared third-party API but does not attempt privilege escalation or persistent system changes.
What to consider before installing
Before installing or running this skill: - Expect to provide a COMFY_DEPLOY_API_KEY environment variable (the script will fail without it). The registry metadata failing to list this is an inconsistency you should ask the publisher to fix. - Understand that local images will be uploaded to https://api.comfydeploy.com and outputs downloaded back; do not upload sensitive or private images unless you trust ComfyDeploy and have reviewed their terms/privacy. - Verify the deployment_id and the ComfyDeploy domain independently (publisher/source is unknown and no homepage is provided). If you don't recognize the provider, request provenance or use an alternative with known trust. - Limit the API key scope if possible, store it securely, and rotate/revoke it if exposed. - If you need stronger assurance, ask the skill author to (a) declare COMFY_DEPLOY_API_KEY in the registry metadata, (b) provide a homepage or source provenance, and (c) explain data retention/processing on ComfyDeploy for uploaded images.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f3n9nmeb3hwdwae92w011xx81116v
1.1kdownloads
5stars
2versions
Updated 18h ago
v1.0.1
MIT-0

Multishot-UGC

Generate 10 perspective variations of an image using ComfyDeploy's MULTISHOT-UGC workflow.

Overview

Multishot-UGC takes a single image and generates 10 different variations exploring different perspectives, angles, and compositions. These variations are designed to be used in VEED lip-sync workflows to create dynamic UGC-style promotional videos with varied camera shots.

API Details

Endpoint: https://api.comfydeploy.com/api/run/deployment/queue Deployment ID: 9ccbb29a-d982-48cc-a465-bae916f2c7fd

Required Inputs

InputDescriptionDefault
input_imageURL or path to the source imageRequired
textDescription for exploration"Explora distintas perspectivas de esta escena"
resolutionOutput resolution"2K"
aspect_ratioOutput aspect ratio"9:16"

Usage

uv run ~/.clawdbot/skills/multishot-ugc/scripts/generate.py \
  --image "./person-with-product.png" \
  --output-dir "./multishot-output" \
  [--text "Custom exploration prompt"] \
  [--resolution 1K|2K|4K] \
  [--aspect-ratio 9:16|16:9|1:1|4:3|3:4]

With URL:

uv run ~/.clawdbot/skills/multishot-ugc/scripts/generate.py \
  --image "https://example.com/image.png" \
  --output-dir "./variations"

Output

The workflow generates 10 PNG images with variations:

  • 1_00001_.png through 10_00001_.png

Each image explores a different perspective/angle of the original scene while maintaining subject identity and composition coherence.

Workflow Integration

Typical Pipeline

  1. Generate hero image with Morpheus/Ad-Ready

    uv run morpheus... --output hero.png
    
  2. Create 10 angle variations

    uv run multishot-ugc... --image hero.png --output-dir ./shots
    
  3. Select best variations for VEED lip-sync

    # Review shots, then generate videos for chosen ones
    uv run veed-ugc... --image ./shots/3_00001_.png --brief "..."
    

Notes

  • Source image should be high quality (at least 1K resolution)
  • Works best with images containing a clear subject/person
  • Generation takes ~2-3 minutes for 10 variations
  • All variations maintain the original aspect ratio unless specified

Comments

Loading comments...