Supplier Video Ad Builder
v1.0.0Transforms supplier or CJ source videos into 1080×1920 TikTok/Instagram Reels ads with clean zone detection, Pillow text overlays, CTA card, and trending audio.
⭐ 0· 201·1 current·1 all-time
byZero2Ai@zero2ai-hub
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the implementation. The two scripts implement the advertised pipeline (frame extraction, cut/slowmo, Pillow text PNGs, CTA card, concat/mux). Required tools (ffmpeg/ffprobe, Python Pillow, a TTF font) are exactly what the task needs.
Instruction Scope
SKILL.md instructs running the included scripts on local files and building a config JSON. The runtime instructions reference only local files (videos, font, logo, audio) and expected binaries; they do not ask the agent to read unrelated system files, environment variables, or send data externally.
Install Mechanism
No install spec — this is instruction + bundled scripts. That minimizes install-time risk; the code is pure Python and uses system ffmpeg/ffprobe. Nothing is downloaded from external URLs during install.
Credentials
The skill declares no environment variables, no credentials, and the code does not attempt to access external services. It only reads user-supplied local paths (fonts, videos, logo, audio) as expected for the task.
Persistence & Privilege
The skill is not forced-always, and it does not modify other skills or agent-wide config. It runs locally and only creates output and a temporary working directory that it removes on completion.
Assessment
This skill appears to do exactly what it claims: local video/image processing using ffmpeg and Pillow. Before running: (1) verify ffmpeg/ffprobe and Python/Pillow are installed; (2) review and use the example config but point to trusted local files (font, logo, source videos, audio); (3) run initially on non-sensitive sample media in an isolated directory to confirm output and avoid accidental overwrites; (4) note there is no network activity or credential use, but the source code and owner are provided without an external homepage — if provenance matters for you, consider asking the publisher for more info or running in a sandbox. Minor operational notes: filenames with unusual characters may break ffmpeg concat quoting, and missing/invalid ffprobe output can cause exceptions; these are implementation robustness issues, not indicators of malicious behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk97bajeb6qg0ct9pgfd6y9jy1982ef79
License
MIT-0
Free to use, modify, and redistribute. No attribution required.