ClawHub

Seedance Video Gen 1 2.0

v0.1.0

Multi-version Seedance video generation on WeryAI (Seedance 2.0, 1.5 Pro, 1.0 Pro / Fast / Lite): text-to-video and image-to-video with version-aware limits....

⭐ 0· 175·0 current·1 all-time
byparallel world@zoucdr
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Seedance video generation) match the requested binary (node) and single env var (WERYAI_API_KEY). The script talks only to WeryAI endpoints and model registry URLs consistent with the stated purpose.
✓
Instruction Scope
SKILL.md stays within the video's generation workflow: prompt expansion, model selection, validation, confirmation table, and invoking scripts/video_gen.js. It does not instruct reading unrelated system files or exfiltrating data. It explicitly warns to treat WERYAI_API_KEY as a secret.
✓
Install Mechanism
There is no install spec (instruction-only). The included script has no external package downloads; Node 18+ required and relies on built-in fetch. No suspicious download URLs or extract/install steps are present.
✓
Credentials
Only WERYAI_API_KEY is required and declared as the primary credential. The script and documentation state only that env var is read; no unrelated secrets or config paths are requested.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request elevated or persistent system presence, nor does it modify other skills' configs in the provided files.
Assessment
This skill appears internally consistent: it requires Node 18+ and a single API key (WERYAI_API_KEY) to call WeryAI's fixed endpoints and return generated video URLs. Before installing or using: (1) only set WERYAI_API_KEY if you trust the skill source (the registry metadata shows an owner id but no homepage); (2) review scripts/video_gen.js locally (it is included) and consider running it in a short-lived container or separate account to limit blast radius; (3) do not commit your API key into version control; (4) be aware that prompts and any public image URLs will be sent to WeryAI for generation (privacy exposure); (5) the skill relies on the agent to supply/choose a model (SKILL.md asks the agent to default to SEEDANCE_2_0 if the user doesn't pick a model) — confirm your agent will follow that. If you need extra assurance, run test invocations with a throwaway key or in an isolated environment.
✗
scripts/video_gen.js:467
Environment variable access combined with network send.
Confirmed safe by external scanners
Static analysis detected API credential-access patterns, but both VirusTotal and OpenClaw confirmed this skill is safe. These patterns are common in legitimate API integration skills.

Like a lobster shell, security has layers — review code before you run it.

latestvk977pv1kep7yqzepe2et0s3t0n83bpa1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Binsnode
EnvWERYAI_API_KEY
Primary envWERYAI_API_KEY

Comments