Is kghamilton89/veo-video-generator safe?
Yes. kghamilton89/veo-video-generator is safe to install. Oathe's behavioral security audit gave the veo-video-generator skill by kghamilton89 a trust score of 87/100 with 4 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/kghamilton89/veo-video-generator
Is kghamilton89/veo-video-generator safe to install?
This is a legitimate video generation skill that uses Google's Veo 3.1 API to create videos from text prompts. The main privacy consideration is that user prompts are sent to an external API service, but this is disclosed and necessary for the skill's functionality. The code is clean with no evidence of malicious behavior.
What security issues were found in kghamilton89/veo-video-generator?
Category Scores
Findings (4)
MEDIUM User prompts sent to external API -20 ▶
The skill sends user-provided text prompts to Google's GenAI API for video generation. While this is the intended functionality, it represents a potential privacy concern as user data leaves the local environment.
LOW Requires npm package installation -5 ▶
The skill requires running 'npm install' to download the @google/genai dependency, which involves executing package installation scripts.
LOW Instructions to execute shell commands -5 ▶
The skill instructions direct the agent to run shell commands (npm install, node generate.js), though these are legitimate for the skill's functionality.
INFO Environment variable access -10 ▶
The skill reads the GEMINI_API_KEY environment variable, which is expected for API authentication but represents access to potentially sensitive configuration.
Should I install kghamilton89/veo-video-generator?
Oathe's verdict for kghamilton89/veo-video-generator is SAFE with a trust score of 87/100. Recommendation: Install with caution.