Art Process Video
Analysis
The skill appears to do what it advertises—generate videos through WeryAI—but it requires a WeryAI API key, sends prompts/images to the WeryAI service, and may consume paid credits.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
Each successful `wait` run consumes WeryAI credits; re-running creates new paid tasks.
The skill can initiate paid remote generation jobs, but this is clearly disclosed and the workflow requires confirmation before submission.
Source: unknown; Homepage: none
The registry metadata does not identify a source repository or homepage, so provenance is limited even though the included script is visible and has no npm dependency install step.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
`WERYAI_API_KEY` **must be set** in the environment before running `video_gen.js`.
The skill requires a service credential to access the user's WeryAI account, which is expected for the integration but still grants account-level generation authority.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
prompts, images, and your bearer token could be sent elsewhere
The skill acknowledges that prompts, public image URLs, and the bearer token are sent to an API host; this is necessary for WeryAI generation and the script restricts override hosts.
