Dlazy Viduq2 I2v

Convert static images into dynamic videos using Vidu Q2 image-to-video model.

Security Scan

The skill is internally consistent with a CLI-based SaaS client: it expects npm/npx, calls a published @dlazy/cli package, and requires a dLazy API key for uploads — nothing in the instructions requests unrelated credentials or system access.

Purpose & Capability

The skill name/description (image→video via Vidu Q2) matches the declared requirements: npm/npx (to run the published CLI). Minor metadata/version noise: registry lists version 1.0.4, SKILL.md header is 1.0.2 and the install is pinned to @dlazy/cli@1.0.6 — this is an inconsistency in version labels but does not contradict the stated purpose.

Instruction Scope

SKILL.md instructs the agent to run the dlazy CLI which will upload any local image/audio/video paths to dlazy's media storage (oss.dlazy.com) and send prompts to api.dlazy.com. This is expected for a cloud generation client, but it means any local files you pass will be transmitted to the vendor. The instructions do not direct the agent to read other unrelated files or secrets.

Install Mechanism

This is an instruction-only skill that points to an npm package (@dlazy/cli@1.0.6) and suggests either global npm install or npx. Using an npm package is expected for a CLI client; it carries the usual moderate risk of third-party packages, so auditing the GitHub repo / npm package before global install is recommended. There is no arbitrary URL download or extracted archive in the skill itself.

Credentials

No required environment variables are declared by the registry. The CLI requires a dLazy API key (set via 'dlazy auth set' or DLAZY_API_KEY) which is appropriate and proportionate for a hosted API client. The CLI stores the key in ~/.dlazy/config.json (per SKILL.md), which is expected behavior. No unrelated credentials are requested.

Persistence & Privilege

The skill is not always-enabled and is user-invocable. It does not request to change other skills' configs or system-wide settings. It only references its own CLI config location; autonomy (model invocation) is allowed by default but not combined with other red flags.

Assessment

This skill is a thin CLI client for the dLazy service and appears coherent. Before installing or running: (1) review the @dlazy/cli GitHub repo and npm package to confirm code provenance; (2) prefer running via npx to avoid a global install if you don't want an extra permanent binary; (3) be aware that any local images/audio you pass will be uploaded to dlazy's oss.dlazy.com storage and that usage may incur charges; (4) the CLI stores your API key in ~/.dlazy/config.json — rotate/revoke the key from the dlazy dashboard if needed; (5) verify the npm package version in the upstream repo matches what you install (SKILL.md metadata shows slightly inconsistent version labels). If you don't trust the upstream project, do not install or provide sensitive images.

English · 中文

Convert static images into dynamic videos using Vidu Q2 image-to-video model.

Trigger Keywords

• vidu q2
• image to video
• image to dynamic video

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Run the dlazy viduq2-i2v command to get results.

dlazy viduq2-i2v -h

Options:
  --prompt <prompt>                    Prompt
  --generation_mode <generation_mode>  Generation Mode [default: components] (choices: "components", "frames")
  --images <images...>                 Images [image: url or local path] (max 10) [hidden when generation_mode="frames"]
  --firstFrame <firstFrame>            First Frame [image: url or local path] [only when generation_mode="frames"]
  --lastFrame <lastFrame>              Last Frame [image: url or local path] [only when generation_mode="frames"]
  --subjects <subjects...>             Subjects (max 7) [hidden when generation_mode="frames"]
  --audio <audio>                      Audio [default: false] (choices: "true", "false")
  --audioType <audioType>              Audio Type [default: all] (choices: "all", "speech_only") [hidden when generation_mode="frames"]
  --duration <duration>                Duration (s) [default: 5] (choices: "2", "3", "4", "5", "6", "7", "8", "9", "10")
  --aspectRatio <aspectRatio>          Aspect Ratio [default: 9:16] (choices: "16:9", "9:16", "1:1", "3:4", "4:3", "21:9", "2:3", "3:2")
  --resolution <resolution>            Resolution [default: 720p] (choices: "540p", "720p", "1080p")
  --watermark <watermark>              Watermark [default: false] (choices: "true", "false")
  --wmPosition <wmPosition>            Watermark Position [default: 3] (choices: "1", "2", "3", "4")
  --wmUrl <wmUrl>                      Watermark URL
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Command Examples

# basic call:
dlazy viduq2-i2v --prompt 'prompt text' --image '/path/to/image.png'

# complex call:
dlazy viduq2-i2v --prompt 'prompt text' --image 'https://oss.dlazy.com/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.