Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Fanqie Novel AI Video Drama Batch Generator

v5.0.0

Batch generates complete AI video dramas from multi-chapter novels with covers, titles, tags, and outputs for TikTok serialization.

0· 81·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for ghwyever/fanqie-ai-video-drama.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Fanqie Novel AI Video Drama Batch Generator" (ghwyever/fanqie-ai-video-drama) from ClawHub.
Skill page: https://clawhub.ai/ghwyever/fanqie-ai-video-drama
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install fanqie-ai-video-drama

ClawHub CLI

Package manager switcher

npx clawhub@latest install fanqie-ai-video-drama
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill intends to produce videos from novel chapters and does call video/image/TTS services and run local ffmpeg to combine assets (which is coherent). However, the manifest/metadata declare no required binaries or credentials while the code clearly requires ffmpeg on PATH and makes network calls to third‑party APIs; those omissions are disproportionate to the stated metadata and confuse deployment/privilege expectations.
!
Instruction Scope
SKILL.md describes splitting the novel and batch-generating episodes but does not disclose that the full chapter text will be POSTed to external endpoints (api.kelingai.com and openspeech.bytedance.com). The code transmits user content to these external services and writes output files to disk; the privacy/networking implications are not documented in SKILL.md.
Install Mechanism
There is no install spec (lower install risk), but the bundled code expects node runtime libraries and an ffmpeg binary. The skill does not declare these binaries or dependencies, so deployers may encounter missing binary/dependency errors or may inadvertently run it in an environment lacking required tooling.
!
Credentials
The skill declares no required environment variables or primary credential, yet it calls external APIs that commonly require API keys (kelingai endpoints and Bytedance TTS). This is a mismatch: either the endpoints accept unauthenticated requests (unusual) or the skill expects credentials to be provided out-of-band. Additionally, user-provided novel text is sent to third parties without any documented consent/privacy notice.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system privileges. It writes output into a timestamped directory under its own __dirname, which is expected behavior for a generator tool.
What to consider before installing
This skill will upload the full novel chapters you provide to external services (api.kelingai.com and openspeech.bytedance.com) and will call local ffmpeg to assemble videos, but the package metadata doesn't declare required binaries or API credentials. Before installing, consider: 1) Are you comfortable sending your text (and any copyrighted or sensitive content) to these third parties? 2) Ensure ffmpeg is available on the host (the code runs execSync ffmpeg) or the skill will fail. 3) Ask the publisher where API keys should be configured; the skill does not declare required env vars but likely needs them — absence of declared credentials is suspicious. 4) Prefer running this skill in an isolated environment (container or sandbox) and inspect network traffic to confirm endpoints and that no unexpected destinations receive data. 5) If you must proceed, test with non-sensitive sample text first and request the author/source of the skill and documentation for required dependencies and privacy/TOS for the third‑party services.
skill.js:75
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

aivk97dejf4g5wpyxfqvczmn89b0h84h3c2batchvk97dejf4g5wpyxfqvczmn89b0h84h3c2digital-humanvk97dejf4g5wpyxfqvczmn89b0h84h3c2dramavk97dejf4g5wpyxfqvczmn89b0h84h3c2fanqievk97dejf4g5wpyxfqvczmn89b0h84h3c2latestvk97dejf4g5wpyxfqvczmn89b0h84h3c2manhuavk97dejf4g5wpyxfqvczmn89b0h84h3c2novelvk97dejf4g5wpyxfqvczmn89b0h84h3c2videovk97dejf4g5wpyxfqvczmn89b0h84h3c2
81downloads
0stars
1versions
Updated 2w ago
v5.0.0
MIT-0

番茄小说AI短剧·批量终极版

最强功能: ✅ 粘贴多章小说 → 自动拆分成第1集、第2集、第3集… ✅ 每集独立生成完整视频 ✅ 每集自带封面+标题+标签 ✅ 批量输出,直接发布抖音连载

输入:

  • 多章小说文本(用“第1章”“第2章”分隔)
  • type: manhua / zhenren
  • style: 赘婿 / 古风 / 现言 / 玄幻 / 甜宠

输出:

  • 文件夹:第1集、第2集、第3集…
  • 每集包含:final_video.mp4 + cover.jpg + info.json + 脚本

Comments

Loading comments...