Ai Animation Studio
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears aligned with making AI animation videos, but it uses an API key, external media APIs, local media-processing tools, and a local asset folder that users should review first.
Before installing, confirm you trust the skill source and its doubao-media/edge-tts/ffmpeg dependencies. Use a limited ARK_API_KEY, run it in a dedicated output folder, keep D:\AI视频资源 limited to intended assets, and avoid submitting confidential story text or private media unless you are comfortable sending it to the external generation provider.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill may consume the user's API quota or billing on the configured account.
The workflow uses a bearer API key for the external Doubao/Volcengine media API. This is expected for the skill's purpose, but it is a sensitive account credential and is under-declared in the registry requirements.
API_KEY = os.getenv("ARK_API_KEY", "") ... "Authorization": f"Bearer {API_KEY}"Use a dedicated, limited API key where possible and confirm you are comfortable with the provider account being used for video generation.
Story text, style prompts, and generated media requests may leave the local machine and be processed by the provider.
The skill sends user-derived prompts to an external media-generation API and downloads generated images/videos. This is central to the stated AI animation purpose.
payload = {"model": "doubao-seedream-3-0-t2i-250415", "prompt": prompt, ...}; requests.post(f"{BASE_URL}/images/generations", headers=self.headers, json=payload, timeout=60)Avoid putting confidential stories, private names, or sensitive business information into prompts unless the provider terms and account controls are acceptable.
If the local dependency path points to an unexpected or modified script, that helper code would run as part of animation generation.
One workflow calls a hard-coded local helper script from another skill path. The dependency is disclosed, but users should verify the dependent skill and path before running it.
self.doubao_script = r"C:\Users\10954\.openclaw\workspace\skills\doubao-media\scripts\doubao_media.py"
Review and install the expected doubao-media dependency from a trusted source, and update hard-coded paths to a known-good local installation.
Private or untrusted files placed in the configured resource directory could be included in indexes, exported scripts, or creative prompt selection.
The resource index scans a local asset directory and loads local templates, prompts, media, and audio paths that can influence generated scripts and outputs.
RESOURCE_DIR = r"D:\AI视频资源" ... for root, _, filenames in os.walk(cat_path):
Keep the resource directory limited to trusted animation assets and avoid storing unrelated private documents in that folder.