Dlazy Wan2.7

Tongyi Wanxiang 2.7 video model 鈥?one model covers text-to-video, first/last-frame-to-video, and reference-to-video.

Security Scan

This is a thin CLI client for the dLazy Wan2.7 video API and its declared requirements and instructions are coherent with that purpose.

Purpose & Capability

Name/description (video generation) line up with the instructions and required binaries. Requesting npm/npx is reasonable because the skill recommends installing or invoking the @dlazy/cli package. No unrelated credentials or binaries are required.

Instruction Scope

SKILL.md instructs the agent to run the dlazy CLI and documents that prompts and any local media files are uploaded to dlazy's API/OSS endpoints. The instructions do not ask the agent to read or transmit unrelated system files or credentials beyond the API key needed by the service.

Install Mechanism

This is an instruction-only skill (no install spec in registry), but the skill suggests installing a pinned npm package (@dlazy/cli@1.0.6) or using npx. Installing an npm package is an expected, traceable mechanism for a CLI client, but installing global npm packages runs third-party code—review the GitHub repo before installing or prefer npx to avoid persistent global binaries.

Credentials

The skill does not declare required env vars in registry, but SKILL.md documents using a DLAZY_API_KEY environment variable or storing a key in ~/.dlazy/config.json. Asking for an API key and storing it in the user's config is proportionate to the service. Minor inconsistency: DLAZY_API_KEY is referenced in instructions but not listed in the registry's required env vars.

Persistence & Privilege

always:false (no forced presence). The skill is instruction-only and does not request privilege to alter other skills or system-wide settings. The CLI will store an API key in a per-user config file if you use dlazy auth set, which is standard behavior for a CLI client.

Assessment

This skill is a thin wrapper around dLazy's CLI and API. Before installing or using it: (1) review the @dlazy/cli GitHub source if you plan to npm install globally; prefer npx if you want no persistent binary. (2) Be aware any local images/audio/videos you pass will be uploaded to dlazy's OSS (oss.dlazy.com) — do not send sensitive files. (3) The CLI stores an API key at ~/.dlazy/config.json or you can pass DLAZY_API_KEY; treat that key as a secret and rotate/revoke from the dLazy dashboard if needed. (4) If you see 'unauthorized' or 'insufficient_balance' errors, the skill's docs instruct user-facing flows (linking to dlazy.com) — those are expected but require you to trust the external service. Overall the skill's requests appear proportionate to its stated purpose.

English · 中文

Tongyi Wanxiang 2.7 video model. Covers text-to-video, first/last-frame-to-video, and reference-to-video.

Trigger Keywords

• wan 2.7
• video generation

Authentication

All requests require a dLazy API key, configured through the CLI:

dlazy auth set YOUR_API_KEY

The CLI saves the key in your user config directory (~/.dlazy/config.json on macOS/Linux, %USERPROFILE%\.dlazy\config.json on Windows), with file permissions restricted to your OS user account. You can also supply the key per-invocation via the DLAZY_API_KEY environment variable.

Getting Your API Key

1. Sign in or create an account at dlazy.com
2. Go to dlazy.com/dashboard/organization/api-key
3. Copy the key shown in the API Key section

Each key is scoped to your dLazy organization and can be rotated or revoked at any time from the same dashboard.

About & Provenance

• CLI source code: github.com/dlazyai/cli
• Maintainer: dlazyai
• npm package: @dlazy/cli (pinned to 1.0.6 in this skill's install spec)
• Homepage: dlazy.com

You can install on demand without persisting a global binary by running:

npx @dlazy/cli@1.0.6 <command>

Or, if you prefer a global install, the skill's metadata.clawdbot.install field declares the exact pinned version (npm install -g @dlazy/cli@1.0.6). Review the GitHub source before installing.

How It Works

This skill is a thin client over the dLazy hosted API. When you invoke it:

• Prompts and parameters you provide are sent to the dLazy API endpoint (api.dlazy.com) for inference.
• Any local file paths you pass to image / video / audio fields are uploaded to dLazy's media storage (oss.dlazy.com) so the model can read them — the same flow as any cloud-based generation API.
• Generated output URLs returned by the API are hosted on oss.dlazy.com.

This is the standard SaaS pattern; the skill itself does not access network or filesystem resources beyond what the dLazy CLI already handles. See dlazy.com for the full service terms.

Usage

CRITICAL INSTRUCTION FOR AGENT: Execute dlazy wan2.7 to get the result.

dlazy wan2.7 -h

Options:
  --prompt <prompt>                    Prompt
  --generation_mode <generation_mode>  Generation Mode [default: components] (choices: "components", "frames")
  --images <images...>                 Images [image: url or local path] (max 5) [hidden when generation_mode="frames"]
  --videos <videos...>                 Videos [video: url or local path] (max 5) [hidden when generation_mode="frames"]
  --firstFrame <firstFrame>            First Frame [image: url or local path] [only when generation_mode="frames"]
  --lastFrame <lastFrame>              Last Frame [image: url or local path] [only when generation_mode="frames"]
  --audio <audio>                      Audio [audio: url or local path]
  --resolution <resolution>            Resolution [default: 720P] (choices: "720P", "1080P")
  --duration <duration>                Duration (s) [default: 5] (choices: "2", "3", "4", "5", "6", "7", "8", "9", "10", "11", "12", "13", "14", "15")
  --prompt_extend <prompt_extend>      Prompt Rewrite [default: true] (choices: "true", "false")
  --watermark <watermark>              Watermark [default: false] (choices: "true", "false")
  --input <spec>                       JSON payload: inline string, @file, or - (stdin)
  --dry-run                            Print payload + cost estimate without calling API
  --no-wait                            Return generateId immediately for async tasks
  --timeout <seconds>                  Max seconds to wait for async completion (default: "1800")
  -h, --help                           display help for command

Output Format

{
  "ok": true,
  "kind": "urls",
  "data": {
    "urls": [
      "https://oss.dlazy.com/result.mp4"
    ]
  }
}

Examples

dlazy wan2.7 --prompt 'prompt content' 
dlazy wan2.7 --prompt 'prompt content' --images '/path/to/image.png'

Error Handling

Code	Error Type	Example Message
401	Unauthorized (No API Key)	ok: false, code: "unauthorized", message: "API key is missing or invalid"
501	Missing required parameter	error: required option '--prompt <prompt>' not specified
502	Local file read error	Error: Image file/Video file not found: C:\path\to\your\file
503	API request failed (no balance)	ok: false, code: "insufficient_balance"
503	API request failed (server error)	HTTP status code error (500 server crash)
504	Asynchronous task execution failed	=== Generation Failed === / {Specific error reason returned by backend, for example "Prompt violates safety policy"}

AGENT CRITICAL INSTRUCTION:

1. If the execution result returns code: "insufficient_balance", you MUST explicitly inform the user that their credits are insufficient and guide them to recharge: https://dlazy.com/dashboard/organization/settings?tab=credits
2. If the execution result returns code: "unauthorized" or indicates missing API key, you MUST inform the user to get their API key from https://dlazy.com/dashboard/organization/api-key and save it using dlazy auth set <key> and resume the task.

Tips

Visit https://dlazy.com for more information.