Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Industrial Mecha Style Transform (Seedance 2.0)

v1.0.0

Reforge everyday actions as factory-floor power fantasy: hydraulics, sparks, armor plates, heavy sync motion—WeryAI Seedance 2.0 only. Use when you need mech...

0· 110·0 current·0 all-time
byparallel world@zoucdr

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zoucdr/industrial-mecha-transform-video-gen-seedance2-0.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Industrial Mecha Style Transform (Seedance 2.0)" (zoucdr/industrial-mecha-transform-video-gen-seedance2-0) from ClawHub.
Skill page: https://clawhub.ai/zoucdr/industrial-mecha-transform-video-gen-seedance2-0
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: WERYAI_API_KEY
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install industrial-mecha-transform-video-gen-seedance2-0

ClawHub CLI

Package manager switcher

npx clawhub@latest install industrial-mecha-transform-video-gen-seedance2-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description (mecha-style video generation) match the delivered artifacts: SKILL.md, a Node.js CLI, and a WERYAI API reference. Required binary (node) and the single required env var (WERYAI_API_KEY) are appropriate for an API-backed video generation skill.
Instruction Scope
SKILL.md explicitly restricts scope (SEEDANCE_2_0 model only), requires mandatory prompt expansion, and documents the exact CLI calls. It also documents that local files may be read and uploaded and requires explicit consent before doing so — this local-read/upload behavior is expected for image→video flows and is implemented in the bundled script.
Install Mechanism
No install spec is present (instruction + shipped script only). The script is plain Node.js with no npm dependencies and uses standard APIs and fixed HTTPS endpoints. Nothing is downloaded from arbitrary URLs or written to unexpected system locations.
Credentials
Only WERYAI_API_KEY is required and is the declared primary credential. The script reads no other environment variables and uses the key for Authorization headers to the documented WeryAI hosts; this is proportional to the skill's function.
Persistence & Privilege
The skill is not always-enabled and does not request elevated privileges or modify other skills or global agent settings. It runs as an invoked CLI and does not persist additional credentials or configuration beyond using the provided API key at runtime.
Assessment
This package appears to be what it says: a Node.js CLI that calls WeryAI endpoints and (if you give it local file paths) will read and upload local image files to WeryAI using your WERYAI_API_KEY. Before installing or running: 1) do not commit your WERYAI_API_KEY into the repo; configure it in a secure runtime environment; 2) review scripts/video_gen.js yourself if you plan to pass local file paths (the script will read and upload those files); 3) prefer public https image URLs to avoid local uploads; 4) run in an isolated account or container if you want higher assurance; and 5) confirm you are willing to allow uploads to the fixed hosts (api.weryai.com and api-growth-agent.weryai.com) and that the SEEDANCE_2_0 model requirement fits your policy. These are expected operational cautions rather than indicators of covert behavior.
scripts/video_gen.js:666
Environment variable access combined with network send.
!
scripts/video_gen.js:218
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🤖 Clawdis
Binsnode
EnvWERYAI_API_KEY
Primary envWERYAI_API_KEY
latestvk97fwysfa57qhywer5am9gcj7183d77c
110downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Industrial mecha & heavy machine style transform (Seedance 2.0)

Metal-forward intensity: assembly lines, gantry lights, spark showers on impacts, hydraulic hiss beats, heroic industrial scale.

Dependencies: WERYAI_API_KEY + Node.js 18+. This skill uses only SEEDANCE_2_0. When you run the CLI, {baseDir}/scripts/video_gen.js must exist; WERYAI_VIDEO_API.md must exist under {baseDir}/resources/ (supply both via publish or pre-use assembly). Full commands and JSON fields: see resources/WERYAI_VIDEO_API.md. No other Cursor skills required.

Prerequisites

  • WERYAI_API_KEY must be set before running video_gen.js.
  • Node.js 18+; prefer public https image URLs. If the assembled scripts/video_gen.js accepts local paths, review/verify the script and explicitly consent before local read-and-upload to WeryAI.
  • Model (caller / agent): The bundled video_gen.js requires a non-empty model in JSON—if model is missing or blank, the CLI exits with MISSING_PARAM (no default model). The script does not enforce this skill's allowed model in code: you must set "model":"SEEDANCE_2_0" for this package and show it in the confirmation table before submit—see WERYAI_VIDEO_API.md (model row).
  • Each wait run may consume credits; re-run creates new paid tasks.

Security, secrets, and API hosts

  • WERYAI_API_KEY: Treat as a secret. Only configure it if you trust this skill's source; it is listed in OpenClaw metadata as requires.env / primaryEnv so installers know it is mandatory at runtime (never commit it inside the skill package).
  • API hosts (fixed in video_gen.js): Video tasks use https://api.weryai.com; the models list uses https://api-growth-agent.weryai.com. Child skills must not document or rely on URL environment-variable overrides—only WERYAI_API_KEY is read from the environment.
  • Local image handling disclosure: Prefer public https image URLs. If the assembled scripts/video_gen.js supports local file paths, it may read a local image and upload it to WeryAI to obtain a public URL; require review / verification and explicit consent before using that path.
  • Higher assurance: Run generation in a short-lived or isolated environment (separate account or container), and review scripts/video_gen.js (HTTPS submit + poll loop) before production use. Verify whether the runtime can read local image files and upload them to WeryAI, and obtain explicit consent before using that path.

Prompt expansion (mandatory)

video_gen.js does not expand prompts. Before every wait --json, turn the user's short or vague brief into a full English production prompt that re-styles the described event into this skill's look.

When: User input is short, vague, or missing cinematic detail. Exception: They supply a finished long prompt within 2000 characters and ask you not to rewrite—still show the full text in the confirmation table.

Always add: shot size and angle; camera move; lighting and color grade aligned to this skill; subject action paced to duration; one clear payoff; platform framing (9:16 unless user chose another allowed ratio); if generate_audio is true, describe ambience / SFX in generic words (no copyrighted music references).

Length: Stay within prompt_length_limit 2000 for SEEDANCE_2_0; trim adjectives before losing the core transformation beat.

Confirmation: The pre-submit table must include the full expanded prompt.

Style transformation checklist

  • Materials: brushed steel, carbon weave, warning decals—cohesive palette.
  • Structure: pistons, exoskeleton hints, clamp arms—support the user action.
  • VFX: sparks, coolant mist, heat shimmer on welds (non-tutorial gore).
  • Space: hangar, forge, clean lab bay—vertical depth with overhead rigs.
  • Motion: powerful stomp-sync, slow-mo on impact peaks.
  • Sound (if on): clangs, servo whine, compressor beds—text only in prompt.

Fits: Hardcore maker energy, manufacturing pride, strength sports, tool glorification.

### Example prompts below are richness targets only—always derive from the user's actual brief.

Workflow

  1. Confirm the request matches this skill (text-to-video and/or single image-to-video).
  2. Collect the user's brief, optional image URL, and tier (best / good / fast)—all map to SEEDANCE_2_0 with different duration defaults (see Recommended models).
  3. Expand prompt (mandatory): Unless the user opted out with a finished long prompt, expand using ## Prompt expansion (mandatory). Do not submit only the user's minimal words.
  4. Validate model is SEEDANCE_2_0 only; validate duration, aspect_ratio, resolution, generate_audio against the frozen tables.
  5. Show the confirmation table with the full expanded prompt; wait for confirm or edits.
  6. Run node {baseDir}/scripts/video_gen.js wait --json '...'.
  7. Parse stdout JSON; return videos URLs or explain errors.
  8. When presenting playable URLs to the user, use Markdown inline links only (e.g. [Video](https://...)). Do not wrap user-facing links in code fences.

CLI reference

node {baseDir}/scripts/video_gen.js wait --json '{"model":"SEEDANCE_2_0","prompt":"…","duration":10,"aspect_ratio":"9:16","resolution":"720p","generate_audio":true}'

Full reference: WERYAI_VIDEO_API.md.

Definition of done

Done when the user gets at least one playable Video-style link, or a clear failure with next steps. Submitted prompt must be the expanded prompt unless the user explicitly opted out. Never use another model_key in this skill.

Boundaries (out of scope)

  • Do not use any model other than SEEDANCE_2_0 for this package.
  • Do not link to weryai-model-capabilities.md or shared ../references/ paths; use resources/WERYAI_VIDEO_API.md for CLI/API details.
  • Do not use local file paths for image; never embed the secret value of WERYAI_API_KEY in files.
  • Do not invent API fields; do not send negative_prompt (not supported for this model).
  • Do not wrap user-facing playable URLs in Markdown code fences.

Example prompts

  • Hammering nail → macro with hydraulic ram metaphor, sparks, 9:16
  • Gym lift → exoskeleton ghost overlay, industrial fan light, sweat sparkle steel
  • HTTPS car engine → mecha-panel UI hologram, assembly arms background

Model and API constraints (frozen for this skill)

Derived from node {baseDir}/scripts/video_gen.js models alignment at authoring time; re-run models after platform upgrades. This skill is locked to SEEDANCE_2_0 only.

Text-to-video

model_keydurationsaspect_ratiosresolutionsAudionegative_promptprompt limit
SEEDANCE_2_05, 10, 159:16, 1:1, 16:9480p, 720pYesNo (do not send)2000

Image-to-video (single image)

model_keydurationsaspect_ratiosresolutionsAudionegative_promptupload_image_limit
SEEDANCE_2_05, 10, 159:16, 1:1, 16:9480p, 720pYesNo (do not send)3

Recommended models

Tiermodel_keyNotes
⭐ Best (default)SEEDANCE_2_0Prefer duration 10 or 15, resolution 720p, generate_audio true for fullest mood
👍 GoodSEEDANCE_2_0Balanced: duration 10, resolution 720p, audio per user
⚡ FastSEEDANCE_2_0Snappy: duration 5, resolution 480p or 720p, audio optional

Tier only changes duration / resolution / audio defaults—never the model.


Default parameters

FieldValue
ModelSEEDANCE_2_0 (fixed)
Aspect ratio9:16
Duration10 (use 5 for punchy; 15 for slower ceremony)
Resolution720p (480p allowed)
Audiotrue unless user wants silent

Scenario: Text-to-video style transform

Flow

  1. Capture the user's mundane event in one or two sentences.
  2. Expand into English with the Style transformation checklist; keep identity generic unless user names a character.
  3. Confirmation table → user confirm.
  4. Execute:
node {baseDir}/scripts/video_gen.js wait --json '{"model":"SEEDANCE_2_0","prompt":"<expanded>","duration":10,"aspect_ratio":"9:16","resolution":"720p","generate_audio":true}'
  1. Return [Video](url) links.

Scenario: Image-to-video style transform

Before use: image must be https:// and reachable.

  1. Plan how the still re-styles in motion (props, light, environment) without breaking likeness if the user requests preservation.
  2. Expand prompt; add image to the confirmation table.
  3. After confirm:
node {baseDir}/scripts/video_gen.js wait --json '{"model":"SEEDANCE_2_0","prompt":"<expanded>","image":"https://…","duration":10,"aspect_ratio":"9:16","resolution":"720p","generate_audio":true}'
  1. Return [Video](url) links.

Loop seam (optional)

If the user asks for a seamless loop, append a short English trio at the end of the expanded prompt: seamless loop, perfect loop, ends where it begins—no separate API flag.

Generated for skill industrial-mecha-transform-video-gen-seedance2.0.

Comments

Loading comments...