ClawHub

Fairytale Dream Transform Video Gen Seedance2.0

v0.1.0

Soften any idea into creamy pastel dreamscapes: gentle bloom, cute proportion cues, sugar-glow particles—WeryAI Seedance 2.0 only. Use when you need healing...

⭐ 0· 93·0 current·1 all-time
byparallel world@zoucdr
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (fairytale pastel video transform) matches the resources and included CLI script. Requiring Node.js and a single WERYAI_API_KEY is proportional for a client that calls WeryAI's video APIs.
ℹ
Instruction Scope
SKILL.md prescribes prompt expansion, a confirmation step, and that callers must use model 'SEEDANCE_2_0'. The bundled script enforces a non-empty 'model' but does not enforce the specific model key — this mismatch is documented in SKILL.md. The runtime instructions will transmit user prompts and any public image URLs to remote API hosts (expected for generation), so sensitive user content will be sent off-host.
✓
Install Mechanism
No install spec — instruction-only with a bundled Node script. No downloads, no third-party package installs listed. Script is plain JS (Node 18+), not obfuscated.
✓
Credentials
Only a single required env var (WERYAI_API_KEY / primary credential). The README and script both state only that env var is read; no unrelated secrets or multiple credentials are requested.
✓
Persistence & Privilege
Skill is not force-included (always:false), does not request elevated platform privileges, and does not modify other skills' configuration. It runs as an on-demand CLI call.
Assessment
This skill behaves like a standard client for a remote video-generation service: it will send the expanded prompt and any supplied public image URLs to api.weryai.com (and model registry calls to api-growth-agent.weryai.com) and will consume account credit. Before installing, confirm you trust WeryAI and the skill publisher; do not include private or sensitive images or secrets in prompts; do not commit WERYAI_API_KEY into source. Note the SKILL.md requires callers to set model:'SEEDANCE_2_0' but the script only checks that a model string exists — review and enforce the model in your integration if that restriction matters. For extra safety, run with a short-lived or isolated WERYAI key and review scripts/video_gen.js yourself before use.
✗
scripts/video_gen.js:467
Environment variable access combined with network send.
Confirmed safe by external scanners
Static analysis detected API credential-access patterns, but both VirusTotal and OpenClaw confirmed this skill is safe. These patterns are common in legitimate API integration skills.

Like a lobster shell, security has layers — review code before you run it.

latestvk973tykzgqv9aq0ftw0gptanrn83b11z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🍬 Clawdis
Binsnode
EnvWERYAI_API_KEY
Primary envWERYAI_API_KEY

Comments