ClawHub

corespeed-studio

v1.0.0

Generate video, images, audio, and music using 40+ AI models via fal.ai. Use for video generation (Kling v3, Sora 2, Veo 3.1, LTX 2.3, Pixverse v5), image ge...

⭐ 1· 85·1 current·1 all-time
byZypher Agent@zypher-agent
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (multi-model media via fal.ai) matches requirements and artifacts: the script calls fal_client, needs FAL_KEY, and the SKILL.md lists many fal.ai model endpoints. Requesting the 'uv' runner and FAL_KEY is appropriate for this functionality.
ℹ
Instruction Scope
The SKILL.md and script restrict actions to interacting with fal.ai. The script uploads any local input files (via fal_client.upload_file) and downloads output URLs (urllib.request.urlretrieve). These are expected for a media generation tool, but users should note that local files are transmitted to fal.ai and output URLs are fetched from the network and saved to disk; the script also prints 'MEDIA:' lines for automatic attachment.
✓
Install Mechanism
No registry install spec; the skill is instruction-only with one script file. SKILL.md includes an optional install step (pip install uv). That is a normal package installation method (uv is a known runner). There are no downloads from untrusted hosts or extract/install of arbitrary archives in the repository.
✓
Credentials
Only FAL_KEY is required and used. No additional unrelated secrets/config paths are requested. The script checks only FAL_KEY and does not read other environment variables or system credentials.
✓
Persistence & Privilege
always is false and the skill does not attempt to modify other skills or system-wide agent configuration. It writes generated media to disk (expected behavior) but does not persist credentials or enable itself automatically.
Assessment
This skill appears to do what it says: it will use your FAL_KEY to call fal.ai, upload any local input files you pass, and download generated media to disk. Before installing or running it, ensure you: (1) only provide a fal.ai API key you control and understand the billing/permissions tied to it; (2) avoid uploading sensitive local files (they will be transmitted to fal.ai); (3) review the 'uv' package provenance before pip-installing it or run the script inside an isolated environment; (4) be aware the script will fetch output URLs and save them locally (network fetches could reach external hosts returned by fal.ai); and (5) monitor your fal.ai usage to avoid unexpected costs. If you need stronger guarantees, request that the skill author provide a signed package or host the runner in a sandboxed environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk978kdrbasw30x6mhgt4hx2b7n8390f6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Binsuv
EnvFAL_KEY

Comments