wjs-voicedrop-creating-motion-book

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The script fetches a remote resource via https://jianshuo.dev/voicedrop/books/audiobook at runtime, but jianshuo.dev is an unofficial domain, making it an unofficial operational dependency.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill automates book-to-animation generation pipelines, using cached audiobooks or synthesis APIs with a mention of incurring costs ("以后用户听书和再做动画都不再花钱", "全流程唯一可能花 TTS 钱的地方"), and sets up cloud API instances (Vultr server instantiation). However, it does not perform direct financial transactions, payments, or charges itself. The online endpoint (GET|POST https://lab.jianshuo.dev/api/video-book?slug=) triggers book generation tasks based on cached or public data rather than executing direct money transfers or purchases. Therefore, this is an indirect operation.