Book Video Maker

Generate 1080x1920 vertical book summary videos with AI images, TTS voice, Ken Burns effect, and precise subtitle and audio alignment using customizable temp...

Security Scan

The skill's code, instructions, and resource access are coherent with its stated purpose (generating short vertical book-summary videos) and request only a single image-generation API key; no broad or unrelated permissions are requested.

Purpose & Capability

Name/description match the included code: the script generates 1080x1920 videos using AI images, TTS (edge-tts), and ffmpeg. The script calls an image-generation API (ARK) and TTS + ffmpeg to produce aligned subtitles and audio — all consistent with the stated purpose. Minor metadata inconsistency: the registry summary shows "Required env vars: none" while SKILL.md and the code require an ARK/DOUBAO API key (ARK_API_KEY / DOUBAO_API_KEY) or a config file; this is likely an omission in the registry metadata but not a functional mismatch.

Instruction Scope

SKILL.md tells the user to run scripts/generate.py and to provide an API key either via ARK_API_KEY env var or by creating a file under ~/.qclaw/workspace/kdjojodsi.md; the code uses those sources and otherwise stays within the task (downloading generated images, producing TTS audio, calling ffmpeg). The script writes outputs into an output directory and reads only a small set of specific files for the API key. It does not attempt to read arbitrary system files or exfiltrate data to unexpected endpoints beyond the image-generation service and standard package registries when it auto-installs dependencies.

Install Mechanism

There is no install spec in the registry, but the script auto-installs Python packages at runtime by invoking pip to fetch edge-tts and requests. Runtime pip installs are common but do introduce network-based supply-chain risk (it will fetch packages from PyPI). The skill otherwise relies on system ffmpeg being available (not installed by the skill).

Credentials

The only credential the code requests is an API key for the image-generation service (ARK/DOUBAO). That is proportionate to the functionality. The code looks for the key in ARK_API_KEY / DOUBAO_API_KEY env vars or a small set of named files in ~/.qclaw/workspace and a couple of local paths. Note: if those named files are present in the working directory, the script will parse them for a UUID-like token, so avoid placing sensitive unrelated files with those filenames in directories the script may read.

Persistence & Privilege

The skill does not request persistent platform privileges (always is false) and does not modify other skills or global agent settings. It writes output media files and may create supporting files/directories in the chosen output path and a voices subdirectory; it also installs Python packages at runtime but does not persist configuration beyond writing outputs and reading the optionally configured API key file.

Assessment

This skill appears to do what it says, but a few practical cautions before you run it: 1) Provide the API key only for the image service you expect (ARK / Volces) and verify the endpoint if you have doubts. 2) The script will attempt to pip-install edge-tts and requests at runtime — run it in a virtualenv or sandbox if you want to limit package installation. 3) Ensure ffmpeg is installed and available on PATH. 4) The script reads specific files (~/.qclaw/workspace/kdjojodsi.md and a couple of local filenames) to find a UUID-formatted key — do not store unrelated secrets in files with those names in your project directory. 5) Inspect the ARK service/provider (volces.com / 火山引擎) if you need to confirm trustworthiness. If any of these are concerns, run the code locally in an isolated environment or review/modify the script before use.

Book Video Maker 2.0

书单爆款短视频生成器 - 精准字幕语音对齐版

快速开始

python scripts/generate.py -b "穷爸爸富爸爸" -a "罗伯特·清崎" -q templates/rich_dad_poor_dad.json

配置API Key

方式1 - 创建配置文件:

~/.qclaw/workspace/kdjojodsi.md

内容写入：

豆包 API Key: `你的UUID格式Key`

方式2 - 环境变量:

export ARK_API_KEY='你的API Key'

获取API Key: 访问火山引擎控制台开通豆包图片生成服务

参数说明

参数	说明
-b	书名（必需）
-a	作者（必需）
-q	金句JSON文件
-o	输出目录

内置模板

• rich_dad_poor_dad.json - 《穷爸爸富爸爸》22句

视频效果

• 分辨率: 1080x1920 (竖屏)
• Ken Burns特效
• 精准字幕语音对齐
• AI配图 + TTS语音

---

版本: 2.0.0