Code Pluginsource linked

Pluginv1.0.2

OpenClaw code-plugin that wraps the @dlazy/cli generation catalog (image, video, audio).

dlazy-generate-plugin·runtime dlazy-generate·by @dlazyai
Community code plugin. Review compatibility and verification before install.
openclaw plugins install clawhub:dlazy-generate-plugin
Latest release: v1.0.2Download zip

Capabilities

configSchema
Yes
Executes code
Yes
HTTP routes
0
Runtime ID
dlazy-generate

Compatibility

Built With Open Claw Version
2026.5.7
Min Gateway Version
>=2026.3.24-beta.2
Plugin Api Range
>=2026.3.24-beta.2
Plugin Sdk Version
2026.5.7
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The stated all-in-one generation purpose fits much of the artifact, but SKILL.md also includes workflow planning, canvas mutation, public asset search, webtoon adaptation, specialist-agent orchestration, and voice-cloning capabilities that go beyond a simple image/video/audio generator.
!
Instruction Scope
The skill uses broad triggers such as "generate" and includes instructions that can route common creative requests into external calls or canvas-writing workflows; some workflows require confirmation, but the top-level scope is still under-disclosed.
Install Mechanism
Installation expects a separate @dlazy/cli binary and dLazy authentication via plugin apiKey or existing ~/.dlazy/config.json credentials; this is disclosed, but users should understand the plugin executes a local subprocess that talks to dLazy services.
!
Credentials
The runtime passes the full parent process environment to the spawned dlazy CLI, which is broader than necessary and may expose unrelated local secrets to the CLI process.
!
Persistence & Privilege
The plugin registers on startup and may rely on persisted local dLazy credentials; SKILL.md also contains state-changing drawToCanvas instructions, while the manifest only advertises a single dlazy_run tool.
Scan Findings in Context
[SDI-1] unexpected: Accepted: the artifact bundles substantially broader workflows than the manifest’s generation-wrapper framing.
[SDI-2] unexpected: Accepted: SKILL.md contains drawToCanvas instructions that can mutate canvas state, which is not clearly disclosed in the manifest.
[SDI-2] expected: Partially accepted: public asset search is adjacent to media workflows, but it should be more clearly disclosed as external retrieval.
[SDI-2] unexpected: Accepted: webtoon adaptation and specialist-agent orchestration are broader than the advertised CLI generation wrapper.
[SQP-2] expected: Accepted as documentation risk: subprocess execution is expected for this plugin, but security boundaries and secret handling are not explained well enough.
[SQP-1] unexpected: Accepted: generic trigger language can activate a very broad tool surface.
[SQP-1] unexpected: Accepted: the idea-to-video workflow combines broad activation with planning and canvas mutation.
[SQP-1] unexpected: Accepted: the idea2video section uses common creative phrasing for a workflow that can write to canvas.
[SQP-2] expected: Accepted as high-risk expected functionality: voice cloning fits audio generation but needs prominent consent and misuse warnings.
[SQP-2] expected: Accepted as high-risk expected functionality: Kling audio cloning similarly lacks prominent consent language.
[SQP-2] unexpected: Accepted: forwarding all of process.env to the subprocess is broader than needed for media generation.
[SQP-2] expected: Accepted as disclosure risk: authenticated remote dLazy use is expected, but fallback to local CLI credentials should be more explicit to users.
What to consider before installing
Install only if you trust the dLazy CLI and service account context. Expect prompts, local media paths, and generated assets to be sent to dLazy services, and be aware the plugin can use existing local dLazy credentials. Avoid using it in environments with unrelated secrets in environment variables, and do not use the voice-cloning features unless you have explicit permission from the speaker.
tests/smoke.mjs:81
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
4d649cf4034c
Tag
4d649cf4034cacc6fe45023dc1056932594fc381
Provenance
No
Scan status
suspicious

Tags

latest
1.0.2

dLazy Generate Plugin

OpenClaw code-plugin that wraps the entire @dlazy/cli generation catalog. Registers one tool — dlazy_run — which can invoke any of the 69 dLazy models (image, video, audio, composite pipelines).

Prerequisites

The plugin spawns dlazy as a subprocess, so the CLI must be on PATH:

npm install -g @dlazy/cli
dlazy login

(Or set apiKey in plugin config to bypass dlazy login.)

The dlazy_run Tool

{
  "model": "veo-3.1",
  "args": { "prompt": "a fox in snow", "image": "https://..." },
  "timeoutSeconds": 600
}
  • model — dlazy subcommand from the catalog (SKILL.md lists all 69).
  • args — object → CLI flags. true → bare flag; arrays → repeated flag.
  • timeoutSeconds — optional, default 300, max 1800.

Returns the JSON envelope printed by dlazy on stdout.

Plugin Config

{
  "command": "dlazy",
  "apiKey": "sk-...",
  "timeoutMs": 300000
}

All fields optional.

Build

npm install
npm run build   # → dist/index.js

Publish

clawhub package publish . --family code-plugin --name dlazy-generate-plugin --version 1.0.0

Layout

plugin/
├── src/index.ts           # plugin source (gitignored from publish)
├── dist/index.js          # built by `npm run build` — not in git, ships in ClawHub artifact
├── openclaw.plugin.json   # manifest + configSchema
├── package.json           # npm config (files field controls publish contents)
├── tsconfig.json          # TS build config
├── SKILL.md               # 69-model catalog (agent reference)
└── README.md

Regenerating SKILL.md

SKILL.md is a merge of every SKILL.md under ../skills/. To refresh after upstream changes, run this from packages/cli/ (PowerShell):

$skillsDir = "skills"
$outPath = "plugin\SKILL.md"
$dirs = Get-ChildItem -Path $skillsDir -Directory | Sort-Object Name

$header = @'
---
name: dlazy-generate
version: 1.0.0
description: All-in-one dLazy generation skill. Bundles every @dlazy/cli model (image, video, audio) plus composite pipelines. Invoke via the dlazy_run tool registered by this plugin.
metadata: {"clawdbot":{"emoji":"🤖","requires":{"bins":["npm","npx"]},"install":"npm install -g @dlazy/cli@1.0.9","installAlternative":"npx @dlazy/cli@1.0.9","homepage":"https://github.com/dlazyai/cli","source":"https://github.com/dlazyai/cli","author":"dlazyai","license":"see-repo","npm":"https://www.npmjs.com/package/@dlazy/cli","configLocation":"~/.dlazy/config.json","apiEndpoints":["api.dlazy.com","files.dlazy.com"]},"openclaw":{"systemPrompt":"Use the dlazy_run tool registered by this plugin. Pass model name + args object. Each section below documents a model and its expected args."}}
---

# dLazy Generate (All Skills)

A single skill that bundles every dLazy generation capability — image, video, audio, and composite pipelines. Each section below documents one model and the flags it accepts.

## How to Invoke

This plugin registers one tool: **`dlazy_run`**.

```json
{ "model": "<model-name>", "args": { "<flag>": "<value>" }, "timeoutSeconds": 300 }
  • model — the dlazy subcommand from the catalog below (e.g. veo-3.1, seedream-4.5, suno-music).
  • args — object whose keys become CLI flags. { prompt: "hi", n: 2 }--prompt hi --n 2. true emits a bare flag. Arrays repeat the flag.
  • timeoutSeconds — optional, default 300 (max 1800).

Returns the JSON envelope printed by the dlazy CLI on stdout.

Table of Contents

'@

$toc = ($dirs | ForEach-Object { "- $($_.Name)" }) -join "n" $body = "" foreach ($d in $dirs) { $mdPath = Join-Path $d.FullName "SKILL.md" if (-not (Test-Path $mdPath)) { continue } $raw = Get-Content -Path $mdPath -Raw -Encoding UTF8 $stripped = $raw -replace '(?s)^---\r?\n.*?\r?\n---\r?\n', '' $stripped = $stripped -replace '(?m)^# \S.*\r?\n', '' $stripped = $stripped -replace '(?m)^\[English\]\(\./SKILL\.md\) · \[中文\]\(\./SKILL-cn\.md\)\r?\n', '' $stripped = $stripped.TrimStart() $body += "nn---nn# $($d.Name)nn$stripped" } [System.IO.File]::WriteAllText($outPath, $header + $toc + $body + "n", [System.Text.UTF8Encoding]::new($false))