Vidu API special effects generation capability, with over 400 built-in effect templates covering styles such as transformation, fun, and holidays.
v1.0.1Vidu AI 场景特效生成。支持389个预设特效模板，包括华丽变身、情人节、风格魔盒、缤纷佳节等。对话式调用，自动匹配模板。
⭐ 0· 134·0 current·0 all-time
byVidu AI@x-jihua
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill name/description (Vidu template-based special effects) match the included assets: SKILL.md, API reference, template list, and a Python CLI that calls Vidu endpoints. The only required credential is VIDU_API_KEY which is appropriate for a cloud API client. Some templates reference well-known IP/characters (e.g., Captain America, Hulk) which is a content/legal concern but not a coherence/security mismatch.
Instruction Scope
SKILL.md confines actions to uploading user photos to the Vidu API and returning creation URLs. The CLI script follows that scope (it encodes local images to base64, accepts image URLs or data URLs, and posts to api.vidu.cn/.com). Minor inconsistency: SKILL.md states the skill will “automatically choose API domain by user language,” but the included script sets BASE_URL to api.vidu.cn by default and does not implement automatic language detection/switching. Also, while the instructions insist on using user-uploaded photos, the script accepts image URLs — that could be used to pass remote URLs rather than local user-uploaded files if misused, so the agent or integrator should ensure the photo source is controlled.
Install Mechanism
There is no install specification (instruction-only behavior) and the skill includes a Python script the agent is instructed to run. No external downloads or package installs are requested by the skill bundle itself, so nothing arbitrary is pulled from third‑party URLs at install time.
Credentials
The only required environment variable is VIDU_API_KEY, which is proportional and used as the Authorization header by the CLI. The script does not attempt to read other environment variables or local credentials. This is appropriate for a cloud API client.
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence. It does not modify other skills or system-wide settings. Execution is local when the agent runs the provided Python CLI.
Assessment
This skill appears to do what it says: call Vidu's API to generate template-based videos and requires only VIDU_API_KEY. Before installing, consider: (1) source/trust: the skill has no homepage and an unknown owner — review the included Python script yourself or only use from trusted sources; (2) privacy: generated content requires uploading user photos to Vidu servers — ensure users consent and that the VIDU service’s privacy policy is acceptable; (3) API domain behavior: SKILL.md claims automatic domain selection by language but the script defaults to api.vidu.cn (verify or modify if you need api.vidu.com for international use); (4) image input: the script accepts remote image URLs as well as local files — if you want to strictly enforce 'user uploaded only', ensure the calling code or agent supplies only local files/base64 data rather than arbitrary URLs; (5) legal/content: some templates reference copyrighted characters or sexualized transformations — ensure you are comfortable with any IP or content-moderation implications. If you want higher assurance, ask the publisher for a homepage or signed/source repository and run the script in a controlled environment first.Like a lobster shell, security has layers — review code before you run it.
latestvk97f5jgmc7k1z8qayg6wd1czzs8385sa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.