TCM Video Factory
v1.0.0Automate health video production planning (Topic Research - Script - Character - Image/Video Prompts) using Perplexity API. Based on TCM Video Factory workflow.
⭐ 1· 2k·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (node), and required env var (PERPLEXITY_API_KEY) align with the implementation: index.mjs calls the Perplexity chat completions endpoint to research and generate prompts and then writes a PLAN_*.md file. There are no unrelated credentials or unexpected external services.
Instruction Scope
SKILL.md and index.mjs instruct the agent to call Perplexity with constructed prompts and save the returned markdown to the current directory. The code does not read other system files, config paths, or additional environment variables, and does not phone home to any endpoint other than api.perplexity.ai.
Install Mechanism
No install spec is provided (instruction-only style), but a package.json/package-lock.json exist listing node-fetch and dotenv. That implies the user must run npm install to fetch dependencies from the public npm registry; dependencies are standard and expected. Minor inconsistency: dotenv is declared but not used in index.mjs (harmless but unnecessary).
Credentials
Only PERPLEXITY_API_KEY is required and is used directly for Perplexity API auth. No other SECRET/TOKEN/PASSWORD env vars are requested. The key is proportional to the stated purpose.
Persistence & Privilege
The skill does not request always:true, does not alter other skills or system-wide configs, and only writes output files to the current working directory. Autonomous invocation defaults are normal and present but not excessive for this skill.
Assessment
This skill is coherent with its description, but review these before installing: 1) The PERPLEXITY_API_KEY you provide will be sent to api.perplexity.ai — do not use a key that grants unrelated privileges or access to sensitive accounts. 2) Do not include private or sensitive information in the topic text (anything you pass is transmitted to Perplexity). 3) If you will run npm install, review dependencies (they come from the public npm registry); the listed packages (node-fetch, dotenv) are common. 4) The script writes PLAN_*.md files to whatever directory you run it from — run it in a directory you control. 5) If you need higher assurance, inspect the included index.mjs yourself or run it in an isolated environment. Overall, the skill appears internally consistent and limited to producing production plans via the Perplexity API.Like a lobster shell, security has layers — review code before you run it.
latestvk97cnykhmgkz816r9qj00mxvk17zzqbe
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Binsnode
EnvPERPLEXITY_API_KEY
Primary envPERPLEXITY_API_KEY