扫描报告
5 /100
oatda-generate-video
Generate videos from text descriptions using AI models through OATDA's unified API
A legitimate video generation API skill that reads credentials from ~/.oatda/credentials.json and makes authenticated API calls to oatda.com. All functionality is declared and necessary.
可以安装
No action needed. This skill is safe to use.
| 资源类型 | 声明权限 | 推断权限 | 状态 | 证据 |
|---|---|---|---|---|
| 文件系统 | READ | READ | ✓ 一致 | SKILL.md:7 - reads ~/.oatda/credentials.json for API key |
| 网络访问 | READ | READ | ✓ 一致 | SKILL.md:52-58 - makes GET/POST requests to oatda.com API |
| 命令执行 | WRITE | WRITE | ✓ 一致 | SKILL.md:7,52 - uses curl and jq CLI tools via inline bash |
| 环境变量 | READ | READ | ✓ 一致 | SKILL.md:6 - reads OATDA_API_KEY env var |
3 项发现
中危 外部 URL 外部 URL
https://oatda.com SKILL.md:4 中危 外部 URL 外部 URL
https://oatda.com/api/v1/llm/models?type=video SKILL.md:54 中危 外部 URL 外部 URL
https://oatda.com/api/v1/llm/generate-video?async=true SKILL.md:66 目录结构
1 文件 · 7.2 KB · 199 行 Markdown 1f · 199L
└─
SKILL.md
Markdown
安全亮点
✓ API key handling follows security best practices - never exposes full key
✓ All required permissions (filesystem, network, shell) are declared in metadata
✓ Uses standard CLI tools (curl, jq) - no custom binaries or downloads
✓ No credential harvesting beyond what's needed for the service
✓ Network requests are limited to legitimate service domain (oatda.com)
✓ No obfuscation, base64 encoding, or hidden commands
✓ Error handling covers auth failures (401) and rate limits (429)