Jimeng Video Generator
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a Volcengine video-generation helper, but it asks for cloud credentials and tells users to run a CLI that is not included in the reviewed package.
Review this carefully before installing. The direct Volcengine API workflow is purpose-aligned, but do not run the advertised jimeng-video CLI unless its source or binary provenance is provided and verified. Use a scoped Volcengine key, confirm costs before batch generation, and avoid sending sensitive images or prompts.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A user or agent could try to execute a missing or unreviewed local binary, potentially with access to the Volcengine credentials documented by the skill.
The reviewed artifact set says there is no install spec and no code files, but the README claims an installed local executable and tells users to run it. Any such executable would be outside the reviewed artifacts.
## 安装 已自动安装，无需额外操作。 ... ~/.openclaw/skills/jimeng-video/jimeng-video generate
Ship the CLI source or binary in the package, add a clear install spec and provenance, declare the required binary, or remove the CLI workflow and keep the skill as documented direct API instructions.
These credentials may authorize billable cloud API actions if used by the skill or an external CLI.
The skill requires Volcengine cloud API credentials, which is expected for video generation, but the registry metadata declares no required environment variables or primary credential.
在 `~/.openclaw/.credentials/volcengine-dreamina.env` 中配置： VOLCENGINE_ACCESS_KEY_ID=your-access-key-id VOLCENGINE_SECRET_ACCESS_KEY=your-secret-key
Use a least-privilege Volcengine key limited to the needed video-generation service, declare the credential requirement in metadata, and rotate the key if it is exposed.
Accidental or overly broad batch prompts could create many videos and consume paid API quota.
Bulk generation is part of the stated video-creation purpose, but it can submit multiple provider jobs and may incur costs.
- **⚡ 批量生成**：支持一次性生成多个视频 ... jimeng-video batch \ --file prompts.txt \ --output-dir ./videos/
Confirm batch size, prompt file contents, output location, and expected cost before running batch generation.
Text prompts, images, and generated video task data may be processed by the external provider.
The skill discloses that prompts and uploaded images are sent to Volcengine's Ark API. This is purpose-aligned, but it is still an external provider data flow.
- **🎵 图生音视频**：上传图片，生成带声音的动态视频 ... curl -X POST "https://ark.cn-beijing.volces.com/api/v3/contents/generations/tasks"
Do not upload private, confidential, or rights-restricted media unless you are comfortable with Volcengine processing it under its terms.