美甲制作过程视频

What to consider before installing: - The skill will send your prompts (and any input images) to a remote service and requires a WERYAI_API_KEY — do not provide sensitive credentials. The registry metadata omits this required env var; confirm the publisher updates metadata before trusting the package. - By default the script calls api.weryai.com and api-growth-agent.weryai.com. But it also accepts WERYAI_BASE_URL and WERYAI_MODELS_BASE_URL overrides; only set these to endpoints you fully trust because a malicious URL could receive your prompts and any images or API key. - The code is readable and matches the described functionality (text/image→video generation and polling). There is no hidden obfuscation or remote installers, so risk is primarily network/exfiltration and metadata mismatch. - Additional checks you can do: verify the WERYAI service and terms (privacy, data retention), request the publisher/homepage information (none provided), and ask them to update the registry to declare WERYAI_API_KEY as a required env var so the manifest matches runtime requirements. - If you must use this skill in a sensitive environment, avoid setting global env vars with broad credentials; use a dedicated, limited API key or proxy that filters data and points to a trusted backend.

These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.