72/100 (Low)

OpenClaw： benign
VirusTotal： suspicious
StaticScan： suspicious

OpenClaw： benign

The skill does what it claims — it runs a bundled Node.js CLI that calls WeryAI’s video APIs and only requires a WERYAI_API_KEY and Node 18+; the package and instructions are internally consistent.

VirusTotal： suspicious VT 报告

静态扫描： suspicious

Detected: suspicious.env_credential_access, suspicious.potential_exfiltration

README 未提供

{
    "latestVersion": {
        "_creationTime": 1774195097009,
        "_id": "k9749d2b195577be38mvqdy4kh83cy0h",
        "changelog": "**Summary: Improved clarity, tightened API & env var requirements, and clarified prompt and security handling.**\n\n- Added detailed requirements for `WERYAI_API_KEY` as the single necessary runtime secret; moved env info to frontmatter and OpenClaw metadata.\n- Added `resources\/WERYAI_VIDEO_API.md` for explicit documentation of API fields and CLI commands.\n- Improved documentation: clarified prompt expansion process, usage of public image URLs, and user confirmation before generation.\n- Detailed security guidance—always review included scripts, especially regarding local file\/image uploads.\n- Made API hostnames in `video_gen.js` fixed and explicit (cannot override via env vars).\n- Restructured and condensed usage, prerequisites, and risk disclosure sections for concise registration and onboarding.",
        "changelogSource": "auto",
        "createdAt": 1774195097009,
        "parsed": {
            "clawdis": {
                "emoji": "🏗️",
                "primaryEnv": "WERYAI_API_KEY",
                "requires": {
                    "bins": [
                        "node"
                    ],
                    "env": [
                        "WERYAI_API_KEY"
                    ]
                }
            }
        },
        "version": "1.0.5"
    },
    "owner": {
        "_creationTime": 0,
        "_id": "publishers:missing",
        "displayName": "parallel world",
        "handle": "zoucdr",
        "image": "https:\/\/avatars.githubusercontent.com\/u\/16458879?v=4",
        "kind": "user",
        "linkedUserId": "kn77fdbqhh143anyw56gmh0vrx835saw"
    },
    "ownerHandle": "zoucdr",
    "skill": {
        "_creationTime": 1774192274158,
        "_id": "kd7deqmsh0q7mbxnbh2srzzmrn83dhp0",
        "badges": [],
        "createdAt": 1774192274158,
        "displayName": "Miniature Build Video",
        "latestVersionId": "k9749d2b195577be38mvqdy4kh83cy0h",
        "ownerUserId": "kn77fdbqhh143anyw56gmh0vrx835saw",
        "slug": "miniature-build-video",
        "stats": {
            "comments": 0,
            "downloads": 27,
            "installsAllTime": 0,
            "installsCurrent": 0,
            "stars": 0,
            "versions": 6
        },
        "summary": "Generate vertical miniature build & reveal shorts (WeryAI): text or finished-shot image to shallow-depth push-ins, lights coming on, immersive camera. Use wh...",
        "tags": {
            "latest": "k9749d2b195577be38mvqdy4kh83cy0h"
        },
        "updatedAt": 1774196511103
    }
}