Media.io Kling Video Generator
v1.0.1Generate high-quality AI videos from text or images using Kling via Media.io OpenAPI with cinematic visuals and smooth motion.
⭐ 0· 94·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (Kling video generation) matches its implementation: included JSON documents define Media.io endpoints and the Python router issues HTTPS requests to openapi.media.io. One inconsistency: the top-level registry snapshot in the prompt lists 'Required env vars: none' while SKILL.md and _meta.json require API_KEY — the API key is expected for this purpose, but the registry metadata omission is a mismatch that should be corrected.
Instruction Scope
SKILL.md instructs the agent to call specific Media.io APIs and to use API_KEY as X-API-KEY, and to poll task results. The instructions do not ask the agent to read unrelated files or secrets, nor to send data to endpoints other than openapi.media.io.
Install Mechanism
This is instruction-only with a small helper script included; there is no install spec, no external downloads, and no archive extraction. The included Python file is short and self-contained.
Credentials
The only secret used is API_KEY (declared in SKILL.md and _meta.json), which is proportionate to calling Media.io. However, the registry metadata block at the top of the submission omitted required env vars — that inconsistency should be resolved before trusting automated install tools that rely on registry metadata.
Persistence & Privilege
always is false and the skill does not request persistent modifications to other skills or system-wide settings. It only reads the API key from the environment or an explicit parameter when invoked.
Assessment
This skill is internally consistent with its stated purpose: it contacts only openapi.media.io and requires a Media.io API key. Before installing, verify the source/publisher (homepage is missing and the publisher is 'Community Maintainer'), and confirm you want to supply a Media.io API key. Prefer a scoped/low-permission key if Media.io supports it, avoid sending sensitive private data or PII in prompts or images (those go to the external service), and rotate the key if you later remove the skill. Also fix the registry metadata mismatch (it should declare API_KEY) so automated tooling and audits will see the required credential.Like a lobster shell, security has layers — review code before you run it.
latestvk973czr5v916w235dc5103qr0x837bq6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.