Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Anime Drama

v1.0.0

将小说原文自动转换为动漫短剧。用户输入故事文本,系统自动完成:分镜脚本生成 → 文生图(RH AI应用)→ 图生视频(RH AI应用)→ ffmpeg合并成片。支持竖屏9:16短视频输出。

0· 175·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ricksf/anime-drama.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Anime Drama" (ricksf/anime-drama) from ClawHub.
Skill page: https://clawhub.ai/ricksf/anime-drama
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: python3, curl, ffmpeg
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install anime-drama

ClawHub CLI

Package manager switcher

npx clawhub@latest install anime-drama
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Name/description align with required binaries (python3, curl, ffmpeg) and the RUNNINGHUB integration. The script and docs consistently implement story→image→video→ffmpeg pipeline and declare dependency on a 'runninghub' helper.
!
Instruction Scope
SKILL.md and the script stay within the stated purpose, but the implementation constructs shell command strings that embed user story/prompt text (enhanced_prompt) and then executes them via subprocess.run(..., shell=True). This allows command injection if the story or prompts contain shell metacharacters. The script also assumes another skill's script exists at ~/.openclaw/workspace/skills/runninghub/scripts/runninghub_app.py and will call it with the API key.
Install Mechanism
No automated install spec (instruction-only + shipped script), so nothing gets implicitly downloaded/installed by the platform. References include manual download of a static ffmpeg binary from johnvansickle.com (documented, not automated) — verify any manual binary downloads before running.
Credentials
Only RUNNINGHUB_API_KEY (primaryEnv) and optional RH_IMAGE_APP_ID / RH_VIDEO_APP_ID are used; these are appropriate for the RunningHub API calls. The script posts images to https://www.runninghub.cn which matches the declared integration.
Persistence & Privilege
always:false and no attempt to change other skills/config. The skill writes workspace files under the user's home directory (anime-drama-workspace), which is expected for generated artifacts but means you should run under a non-privileged account or sandbox.
What to consider before installing
This skill appears to do what it says, but the supplied Python script constructs shell commands that include text from your story and executes them with shell=True — this creates a command-injection vulnerability if any input is untrusted. Recommendations before installing/using: 1) Review runninghub_app.py (the script it invokes) and ensure it's trusted. 2) Run the pipeline in an isolated, non-privileged environment (container or VM). 3) Do not feed untrusted text into the pipeline; sanitize or escape prompts (use shlex.quote or subprocess.run with argument lists instead of shell=True). 4) Limit/rotate the RUNNINGHUB_API_KEY and consider scoping it to a test account. 5) Verify any manually downloaded ffmpeg binary before use. If you cannot audit or fix the subprocess usage, treat the skill as untrusted and avoid running it on sensitive hosts or with sensitive credentials.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎬 Clawdis
Binspython3, curl, ffmpeg
Primary envRUNNINGHUB_API_KEY
latestvk97ee8aqc5gejg89p0r8pn6hgx83bnyj
175downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

动漫短剧生成技能 (Anime Drama Pipeline)

输入小说原文 → 输出竖屏动漫短视频(分镜脚本 + 图片 + 视频片段 + 合并成片)

核心流程

小说原文
  ↓
分镜脚本生成(按段落拆分为多个镜头)
  ↓
并行/逐个执行:
  ├─ 文生图(RH AI应用 AppId: YOUR_IMAGE_APP_ID,节点 12:value)
  └─ 图生视频(RH AI应用 AppId: YOUR_VIDEO_APP_ID,节点 325:value + 269:image)
  ↓
ffmpeg 合并所有视频片段
  ↓
最终成片(竖屏 1080×1920,MP4)

必读参考文档

  • {baseDir}/references/pipeline-usage.md — 完整使用说明
  • {baseDir}/references/ffmpeg-install.md — ffmpeg 安装指南
  • {baseDir}/references/runninghub-ai-app-notes.md — RH AI应用调用要点

核心脚本

python3 {baseDir}/scripts/anime_drama_pipeline.py <小说原文文件> [输出目录]

Pipeline 脚本位置

{baseDir}/scripts/anime_drama_pipeline.py

RH API 关键参数(永久记忆)

用途AppID / 端点节点
文生图YOUR_IMAGE_APP_ID12:value(单节点,直接传 prompt)
图生视频YOUR_VIDEO_APP_ID325:value(文本)+ 269:image(图片)

图生视频调用前必须先上传图片:

  1. POST /task/openapi/upload 上传本地图片
  2. 取返回值中的 fileName(格式 api/xxx.png
  3. fileName 作为 269:image 的值传入

视频合并(ffmpeg)

# 生成文件列表
cat > /tmp/video_list.txt << 'EOF'
file '/path/shot_001_vid.mp4'
file '/path/shot_002_vid.mp4'
EOF

# 合并(竖屏 1080×1920)
ffmpeg -y -f concat -safe 0 -i /tmp/video_list.txt \
  -c:v libx264 -pix_fmt yuv420p \
  -vf "scale=1080:1920:force_original_aspect_ratio=decrease,pad=1080:1920:(ow-iw)/2:(oh-ih)/2:black" \
  output.mp4

ffmpeg 路径(已安装到): /usr/local/lib/python3.10/dist-packages/imageio_ffmpeg/binaries/ffmpeg-linux-x86_64-v7.0.2

分镜逻辑

默认按 \n 换行分割,每段 = 一个镜头,每个镜头生成一张图 + 一段视频。 如需更智能的分镜,可传入 LLM 优化每个镜头的描述文字。

输出格式

  • 图片:PNG,~1.7-2.0MB/张
  • 视频:MP4(H.264 + AAC),每个镜头默认 5 秒
  • 最终成片:MP4,1080×1920(竖屏),16:9 源视频自动 pad 为竖屏

常见错误处理

问题原因解决方法
文生图失败AI 应用未在网页端运行过先在 RH 网页端手动运行一次应用
图生视频失败图片未上传到 RH必须先调用 /task/openapi/upload 获取 fileName
ffmpeg: command not found未安装 ffmpeg使用 imageio-ffmpeg 的内置 ffmpeg
超时中断视频生成需 2-5 分钟/镜头脚本可中断后继续运行(已生成的不会重复生成)

中断后继续

脚本支持断点续传:已生成的图片/视频不会重复生成,中断后重新运行即可继续。

Comments

Loading comments...