Media.io Kling Video Generator
Security checks across static analysis, malware telemetry, and agentic risk
Overview
This appears to be a straightforward Media.io API wrapper for Kling video generation, with the main thing to notice being that it needs a Media.io API key and sends prompts or image URLs to Media.io.
Before installing, make sure you are comfortable giving the skill a Media.io API key and sending your prompts or image URLs to Media.io. The behavior shown is aligned with the advertised video-generation purpose, but the registry metadata should clearly declare the required API_KEY.
Static analysis
No static analysis findings were reported for this release.
VirusTotal
VirusTotal findings are pending for this skill version.
Risk analysis
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Prompts, task IDs, and image URLs supplied to the skill may be sent to Media.io to perform generation or retrieve results.
The helper sends user-provided parameters to a remote API, but it explicitly restricts requests to the expected Media.io HTTPS host, which fits the stated video-generation purpose.
if parsed.scheme != 'https' or parsed.netloc.lower() != 'openapi.media.io':
return {'error': f"Blocked endpoint host: {parsed.netloc}"}
...
resp = requests.request(method, url, headers=headers, json={'data': body} if body else {}, timeout=30)Use this only for content you are comfortable sending to Media.io, and review task parameters before invoking generation.
Using the skill can access Media.io account capabilities such as credit checks, generation requests, and task-result retrieval under the provided API key.
The skill needs a Media.io API key to authorize requests. This is expected for the integration, but it gives the skill access to act through the user's Media.io API account.
- `API_KEY` (required): Media.io OpenAPI key used as `X-API-KEY`.
Provide only a Media.io API key you trust this skill to use, monitor Media.io usage, and ensure the registry metadata is updated to declare the required API_KEY.