surreal-mutation-transform-video-gen-seedance2-0
ReviewAudited by ClawScan on May 10, 2026.
Overview
This appears to be a coherent WeryAI video-generation skill, but users should understand it needs a WeryAI API key and can upload explicitly selected local images to WeryAI.
Install only if you are comfortable giving this skill access to a WeryAI API key and sending prompts or approved images to WeryAI. Before each run, verify the confirmation table, especially the model, prompt, cost-impacting settings, and whether any local file path will be uploaded.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone running the skill with this environment variable lets the helper submit requests to WeryAI using that account.
The skill requires a provider API key to submit generation jobs. This is expected for the stated WeryAI integration, but it grants access to the user's WeryAI account and paid quota.
`WERYAI_API_KEY`: Treat as a secret. Only configure it if you trust this skill's source; it is listed in OpenClaw metadata as `requires.env` / `primaryEnv` so installers know it is mandatory at runtime
Use a dedicated or low-privilege WeryAI key if available, keep it out of project files, and rotate it if you suspect exposure.
If a local image path is approved, that file leaves the local machine and is sent to WeryAI for use in generation.
The helper can read a local file path and upload the file to WeryAI's upload endpoint to obtain a public URL. The SKILL.md and API docs disclose this and require explicit consent, so it is purpose-aligned but privacy-relevant.
const fileBuffer = await fs.readFile(filePath); ... fetch(MODELS_BASE_URL + UPLOAD_API_PATH, { method: 'POST', headers: { Authorization: `Bearer ${apiKey}` }, body: formPrefer public HTTPS image URLs, and only approve local file uploads for non-sensitive images you intend to send to WeryAI.
A mistaken or edited JSON payload could submit a job using the wrong model or consume credits unexpectedly.
The helper script is a generic WeryAI video CLI, so the skill relies on the agent and user confirmation to keep requests scoped to SEEDANCE_2_0.
The script does not enforce this skill's allowed model in code: you must set `"model":"SEEDANCE_2_0"` for this package and show it in the confirmation table before submit
Before confirming, check that the confirmation table shows `model: SEEDANCE_2_0`, the intended duration/aspect ratio, and the exact prompt.