Kling 3.0 — AI Video Generation by Kuaishou
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An unintended or overly broad generation request could consume Atlas Cloud credits or create billable API usage.
The skill's main action submits paid video-generation jobs. This is expected for the stated purpose, but cost-bearing tool use should be explicitly user-approved.
API usage incurs charges per second based on the model selected.
Before running generation, confirm the selected model, duration, resolution, and expected cost; avoid enabling automatic use without review.
Anyone or anything using this environment variable can act on the connected Atlas Cloud account and may incur charges.
The script reads an Atlas Cloud API key from the environment and sends it as a bearer token for authenticated API requests.
key = os.environ.get("ATLASCLOUD_API_KEY") ... "Authorization": f"Bearer {get_api_key()}"Use a dedicated, limited-scope API key if available, keep it out of shared logs or shells, and monitor Atlas Cloud usage.
Prompts, image links, video links, and uploaded media may be processed by Atlas Cloud outside the local environment.
The artifacts clearly disclose an external provider data flow for prompts and media references, which is central to the skill's function but can include private or sensitive content.
This skill sends text prompts, image URLs, and video URLs to the Atlas Cloud API (`api.atlascloud.ai`) for video generation and editing.
Do not send confidential, regulated, or private media unless Atlas Cloud's terms and data-handling policies are acceptable.
Users may have less confidence that the referenced repository is specifically maintained for this Kling video skill.
The declared source repository name appears unrelated to the Kling video skill name, creating a small provenance and branding ambiguity even though the included script is purpose-aligned.
name: kling-video ... source: "https://github.com/AtlasCloudAI/nano-banana-2-skill"
Verify the repository contents, owner, and release history before trusting the skill with an API key or media uploads.