Story Video Generator

Name and description match the runtime instructions: script → frames → segments → BGM → merge. However, the skill assumes the presence (or automatic installation) of FFmpeg and relies heavily on opaque tools (images_understand, gen_images, gen_videos, gen_music) without declaring them as required binaries, services, or credentials — this omission is unexpected for an end-to-end generator.

SKILL.md stays within the stated purpose: it reads user images/text, generates scripts, writes outputs under output/, and runs FFmpeg to merge. It does not instruct access to unrelated system files or secrets. The only scope concern is the broad autonomy given to call external generators (gen_* and LLM) whose network/data handling is unspecified.

There is no install spec, yet the instructions say 'check FFmpeg and install if not available'. Without an install mechanism, it is unclear how FFmpeg would be installed (which package source, whether network downloads occur, or whether elevated privileges are required). This ambiguity increases risk.

The skill requests no environment variables, credentials, or config paths. That is proportionate to its stated purpose. However, because it invokes opaque gen_* services and an LLM, the absence of any declared API keys or endpoints is a gap: if those tools use remote APIs, credentials or network access will be needed but are not documented.

The skill is not always-enabled and does not request persistent system-wide privileges. It writes files only under an output/ directory as part of normal operation. No modifications to other skills or global agent settings are described.