Media.io Hailuo Video Generator
v1.0.0Generate high-quality HD AI videos from text or images using MiniMax Hailuo (Hailuo 2.3) via Media.io OpenAPI with fast processing.
⭐ 0· 93·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Media.io Hailuo video generation) align with the included API definitions and code: the skill only calls Media.io endpoints for credits, task result, and generation models. One minor metadata inconsistency: the top-level registry summary in the prompt listed "Required env vars: none," but both SKILL.md and _meta.json declare API_KEY as required — the code also expects an API_KEY.
Instruction Scope
SKILL.md instructs use of Skill.invoke(...) with api_name and API_KEY and to poll Task Result; it does not instruct reading unrelated files, other environment variables, or sending data to third-party endpoints beyond openapi.media.io.
Install Mechanism
This is an instruction-only skill with an included Python helper file; there is no install spec. The helper uses the 'requests' library but the skill does not declare installation of that dependency — this is an operational (not security) mismatch to verify at runtime.
Credentials
Only a single API_KEY is required (declared in SKILL.md and _meta.json) which is proportional to the stated purpose. The code uses it solely as the X-API-KEY header. No other secrets or unrelated env vars are requested.
Persistence & Privilege
The skill does not request permanent presence (always:false) and does not modify other skills or system-wide settings. It can be invoked autonomously by the agent (default) but that is normal and not excessive here.
Assessment
This skill appears to do what it says: call Media.io's openapi.media.io endpoints using a single API key. Before installing, verify the API_KEY is scoped/minimal and issued by Media.io (rotate it if necessary), ensure your runtime has Python's 'requests' available, and confirm you are comfortable granting the skill a Media.io API key. Also note a minor metadata inconsistency: the registry summary omitted the required API_KEY while SKILL.md/_meta.json include it — treat API_KEY as required. If you don't recognize the publisher or the 'openapi.media.io' hostname, verify with Media.io documentation/support before providing credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk977362sdje9aqzbgbd5a7h6fd83693t
License
MIT-0
Free to use, modify, and redistribute. No attribution required.