Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

nation-resilience-hook-video-gen

v1.0.0

Create vertical nation-resilience hooks with timed English on-screen text (WeryAI): map flashes, resource–geography–defense beats, risk twist. Use for geopol...

1· 108·0 current·0 all-time
byparallel world@zoucdr

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for zoucdr/nation-resilience-hook-video-gen.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "nation-resilience-hook-video-gen" (zoucdr/nation-resilience-hook-video-gen) from ClawHub.
Skill page: https://clawhub.ai/zoucdr/nation-resilience-hook-video-gen
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: WERYAI_API_KEY
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install nation-resilience-hook-video-gen

ClawHub CLI

Package manager switcher

npx clawhub@latest install nation-resilience-hook-video-gen
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (short vertical geopolitics hooks) align with required items: Node.js runtime, a single WERYAI_API_KEY, and a CLI script that calls WeryAI video APIs. Required binaries and env vars are proportional to the stated video-generation purpose.
Instruction Scope
SKILL.md constrains the agent to build a locked prompt timeline, obtain user confirmation, and call node scripts/video_gen.js. It explicitly discloses local-file handling: if a non-HTTPS image path is provided the script will read the file and upload it to WeryAI. That file-read + upload behavior is within the scope of a video-generator but is sensitive—SKILL.md requires explicit user consent before local read-and-upload.
Install Mechanism
No install spec or external downloads are present; the package is instruction-only with a bundled Node.js script. There are no downloads from untrusted URLs or extract/install steps in the manifest.
Credentials
Only WERYAI_API_KEY is requested and declared as the primary credential. The SKILL.md and script only read that key for authenticated calls to WeryAI endpoints (generation, models, upload-file). No unrelated secrets or multiple credentials are requested.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request permanent system-wide privileges or modify other skills. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges here.
Assessment
This package appears coherent for generating short geopolitics videos via WeryAI. Before installing or running it: (1) Review scripts/video_gen.js yourself if you plan to allow local image paths — the script will read local files and POST them to https://api-growth-agent.weryai.com/growthai/v1/generation/upload-file using your WERYAI_API_KEY. Only give local paths after explicit consent. (2) Use a short-lived or isolated API key and do not commit the key to source control. (3) Prefer supplying public https:// image URLs so no local upload is needed. (4) Confirm the expanded prompt and timeline in the confirmation step as required by SKILL.md (it will submit the full prompt to the third-party API). (5) Be mindful of content-policy risks — the skill warns to avoid calls to violence or hate but you are responsible for user-provided prompts. If you need higher assurance, inspect the full script and test in an isolated environment before production use.
scripts/video_gen.js:675
Environment variable access combined with network send.
!
scripts/video_gen.js:223
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🗺️ Clawdis
Binsnode
EnvWERYAI_API_KEY
Primary envWERYAI_API_KEY
latestvk97ftsk5acp2ydr5bsn237mcd183d6z1
108downloads
1stars
2versions
Updated 1mo ago
v1.0.0
MIT-0

Nation resilience hook (map + flashes + risk twist)

Template (timings assume duration 10; rescale proportionally for 5 or 15): 0–2s contrarian hook (“almost can’t collapse”); 2–8s three ultra-short on-screen beats (e.g. resources / geography / defense) synced to fast B-roll; 8–10s twist line that reframes the biggest risk (open-ended ellipsis allowed). English subtitles are burned in with explicit second windows—derived from the user’s country or theme unless they supply a final script. Default duration is 10 when unspecified.

Dependencies: WERYAI_API_KEY + Node.js 18+. scripts/video_gen.js + WERYAI_VIDEO_API.md under resources/ (assembly before run). No other Cursor skills required.

Prerequisites

  • WERYAI_API_KEY must be set before running video_gen.js.
  • Node.js 18+; prefer public https image URLs. If the assembled scripts/video_gen.js accepts local paths, review/verify the script and explicitly consent before local read-and-upload to WeryAI.
  • video_gen.js requires a non-empty model—pick a tier from Recommended models or an explicit model_key from the frozen tables.
  • Each wait run consumes credits.

Security, secrets, and API hosts

  • WERYAI_API_KEY: Secret; listed as requires.env / primaryEnv—never commit the value inside the package.
  • API hosts (fixed in video_gen.js): Video https://api.weryai.com; models registry https://api-growth-agent.weryai.com. No URL overrides documented—only the key is read from the environment.
  • Local image handling disclosure: Prefer public https image URLs. If the assembled scripts/video_gen.js supports local file paths, it may read a local image and upload it to WeryAI to obtain a public URL; require review / verification and explicit consent before using that path.
  • Higher assurance: Use a short-lived or isolated environment; review video_gen.js before production use. Verify whether the runtime can read local image files and upload them to WeryAI, and obtain explicit consent before using that path.

Prompt expansion (mandatory)

video_gen.js does not expand prompts. Build a full English production prompt that locks this template’s timeline.

When: Short user input (country name, region, or metaphorical “nation” topic). Exception: Finished long prompt within prompt_length_limit + user asks not to rewrite—still show full text in the confirmation table.

Always add:

  • Duration: Default 10 when unspecified; 5 or 15 when the user asks and the model allows.
  • Timeline scaling: If duration is 5 or 15, proportionally rescale every subtitle window; keep the same beat order (hook → three staccato labels → twist).
  • Locked caption windows (must follow this rhythm at duration 10):
    • 0.0–2.0s — Hook: e.g. THIS NATION ALMOST CAN’T COLLAPSE (adapt to user topic).
    • 2.0–4.0s, 4.0–6.0s, 6.0–8.0sThree single-focus lines (user-themed): e.g. RESOURCES / GEOGRAPHY / DEFENSE (swap labels to match brief).
    • 8.0–10.0s — Twist: e.g. BUT THE REAL RISK IS… (user fills the implied threat: debt, trust, demographics, etc.—keep ≤6 words on screen if possible).
  • Visuals: Animated map, hard cuts, data glitch overlays, military silhouettes / strategic geography without depicting real identifiable leaders as targets of hate; sub-bass tension if generate_audio is true.
  • Typography: Bold sans, white + black outline, lower third, short fades, no overlapping windows; English only on screen unless user requests otherwise.
  • Motion: Continuous—no static map shots longer than ~1s.
  • Negatives (Kling only): illegible text, watermark, garbled captions.

Confirmation: Pre-submit table includes the full expanded prompt.

Niche checklist

  • Hook must feel too bold to skip—not a textbook opener.
  • Middle three lines are labels, not paragraphs—match one visual beat each.
  • Twist is provocative but not a call to violence or hate.

### Example prompts are richness targets only.

Workflow

  1. Confirm text-to-video and/or image-to-video (optional multi-image only with SEEDANCE_2_0, ≤3 URLs).
  2. Collect brief (which country / abstract “nation” idea), optional image/images, tier or model_key.
  3. Expand prompt per above—author English lines from the brief unless user supplied a script.
  4. Validate JSON fields against frozen tables.
  5. Show confirmation table + full expanded prompt; wait for confirm.
  6. node scripts/video_gen.js wait --json '…'.
  7. Return [Video](url) links or errors—never wrap playable URLs in code fences.

CLI reference

node scripts/video_gen.js wait --json '{"model":"KLING_V3_0_PRO","prompt":"…","duration":10,"aspect_ratio":"9:16","generate_audio":true,"negative_prompt":"illegible text, garbled captions, watermark"}'
node scripts/video_gen.js wait --json '{"model":"SEEDANCE_2_0","prompt":"…","duration":10,"aspect_ratio":"9:16","resolution":"720p","generate_audio":true}'

Full reference: WERYAI_VIDEO_API.md.

Definition of done

Playable Video or clear failure. Submitted prompt includes explicit second-by-second caption windows for the full duration, matching this template’s beat order (scaled when duration is not 10), unless the user opted out with a finished prompt.

Boundaries (out of scope)

  • No guarantee of geopolitical accuracy—entertainment / opinion tone only; avoid incitement.
  • No separate SRT workflow; captions live inside the model prompt.
  • Do not use local image paths unless you have reviewed scripts/video_gen.js and explicitly consent to local read-and-upload to WeryAI; otherwise prefer public https URLs. Do not put secret key values in files.
  • Do not link shared ../references/ capability docs; use resources/WERYAI_VIDEO_API.md.
  • Do not send unsupported API fields; no negative_prompt on Seedance 2.0.
  • Multi-image only SEEDANCE_2_0, max 3 URLs.

Example prompts

  • Japan island supply lines—hook collapse impossible, three beats, twist: aging population
  • Abstract “digital nation” metaphor, same beat map, twist: attention fragmentation
  • Image: stylized map poster URL → animate with same subtitle schedule
  • Island nation energy imports—three beats then twist on grid vulnerability

Model and API constraints (frozen for this skill)

From node scripts/video_gen.js models --mode text_to_video and --mode image_to_video at authoring; re-run after upgrades.

Text-to-video

model_keydurationsaspect_ratiosresolutionsaudionegative_promptprompt limit
KLING_V3_0_PRO5, 10, 159:16, 1:1, 16:9(omit resolution)yesyes2000
KLING_V3_0_STA5, 10, 159:16, 1:1, 16:9(omit resolution)yesyes2000
SEEDANCE_2_05, 10, 159:16, 1:1, 16:9480p, 720pyesno2000

Image-to-video

model_keydurationsaspect_ratiosresolutionsaudionegative_promptimage slots
KLING_V3_0_PRO5, 10, 159:16, 16:9, 1:1(omit)yesyessingle image
KLING_V3_0_STA5, 10, 159:16, 16:9, 1:1(omit)yesyessingle image
SEEDANCE_2_05, 10, 159:16, 1:1, 16:9480p, 720pyesnoup to 3 images

Recommended models

Tiermodel_keyDefault duration
⭐ BestKLING_V3_0_PRO10
👍 GoodKLING_V3_0_STA10
⚡ FastSEEDANCE_2_010 (resolution: 720p)

Tier: unspecified → Best; “draft/quick” → Fast; “balanced” → Good.

Default parameters

FieldValue
aspect_ratio9:16
duration10
generate_audiotrue
resolution720p for Seedance only
negative_promptKling: illegible text, garbled captions, watermark, crowded subtitles

Text-to-video (primary)

User gives country / theme + optional tone. Expand with locked windows → confirm table → wait.

Image-to-video (optional)

Same subtitle schedule; motion activates map or still.

Tips

  • If the user names a real country, keep visuals symbolic (maps, icons)—avoid hostile targeting of groups.
  • Twist line works best as ellipsis to drive comments.

Packaged as nation-resilience-hook-video-gen.

Comments

Loading comments...