video-talkcraft
Agent skill that turns Claude Code / Codex into a motion-design studio for voiceover-driven explainer videos — word-level voiceover sync, 109 motion recipe cards, an anti-slideshow camera system, Remotion rendering.
No outside reports on file
This tool runs system processes and touches the file system, so guard it behind strict input validation and isolate it from sensitive data or production systems.
Based on public adoption and transparency signals as of Oct 22, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachConnects to outside service APINOTED
- CredentialsNo API token requiredLOW
- Package sourceGitHub (Vincentwei1021/video-talkcraft)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
No npm or PyPI package is listed. Install from source: github.com/Vincentwei1021/video-talkcraft ↗
Everything known
We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.
0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30
Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-22.
Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.
About Video Talkcraft
This skill lets Claude create voiceover-driven explainer videos with synchronized motion and animation. It includes 109 motion templates, a camera system to avoid static slideshows, and uses Remotion to render the final videos.
Who it’s for
Video creators and educators who want to build animated explainers programmatically with AI help. Teams building educational or marketing content at scale.
Alternatives
- Synthesia (cloud-based AI video generator with avatar voiceovers)
- D-ID (AI-powered video creation from scripts)
- Runway Gen-2 (text-to-video and video editing with AI)
- Descript (video editing with built-in voiceover and auto-caption sync)
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README. The GitHub repository should contain installation instructions and configuration steps for integrating this skill with Claude or Codex.
Why this grade
Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- GitHub stars
- 1.9k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Risks to watch for
- File system access: The rendering process likely reads and writes video files; malicious prompts could target sensitive files on disk.
- Subprocess execution: Remotion rendering typically spawns system processes; an attacker could inject commands through video metadata or naming.
- Network calls: Video output might upload to storage services; unverified URLs in prompts could exfiltrate rendered content.
- Template injection: The 109 motion recipes are templates; a jailbreak prompt could craft malformed animation code that crashes the renderer or leaks memory.
- Large resource usage: Video rendering is CPU and memory-intensive; a looping prompt could exhaust system resources.
How to lower the risk
Least-privilege permissions
- Run the skill in a sandboxed container with only input/output directories mounted.
- Never grant write access to system directories or config folders.
Network isolation
- Disable outbound networking unless video uploads are required.
- Whitelist only necessary storage endpoints (e.g., S3 buckets).
Monitoring
- Log all file writes and subprocess calls.
- Alert on unexpected file access or long-running renders.
Red flags to watch for
- Prompts asking to render videos with external URLs or third-party templates.
- Requests to skip validation or use "unsafe" rendering modes.
- Unusual CPU or memory spikes during video generation.
Questions
How do I install Video Talkcraft?
Video Talkcraft does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/Vincentwei1021/video-talkcraft.
Are there security reports about Video Talkcraft?
No reports found for this package in our research (last checked 2026-10-30). Video Talkcraft currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include file system access, subprocess execution, network calls.
Is Video Talkcraft actively maintained?
Video Talkcraft has 1.9k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/Vincentwei1021/video-talkcraft before pinning it in production.
What are alternatives to Video Talkcraft?
Notable alternatives to Video Talkcraft include Synthesia, D-ID, Runway Gen-2, Descript. You can also compare Video Talkcraft side by side with other skills in the Related tools section on this page.
README badge and team notes
Maintain or use Video Talkcraft? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/vincentwei1021-video-talkcraft)HTML embed:
<a href="https://agentarmorhq.com/skills/vincentwei1021-video-talkcraft"><img src="https://agentarmorhq.com/api/badge/vincentwei1021-video-talkcraft" alt="AgentArmorHQ Risk Grade for Video Talkcraft" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "vincentwei1021-video-talkcraft"Share with your security lead
Need sign-off to use video-talkcraft? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: video-talkcraft
- **Listing URL:** https://agentarmorhq.com/skills/vincentwei1021-video-talkcraft
- **Type:** AI agent skill
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 1.9k GitHub stars
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (Vincentwei1021/video-talkcraft)
#### Recommended Hardened Setup
- **Source Repo:** https://github.com/Vincentwei1021/video-talkcraft
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 22, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- AI agent skill
- Publisher
- Vincentwei1021
- Source code
- github.com/Vincentwei1021/video-talkcraft
- Est. context load
- ~82 tokens idle · ~450 tokens when active (on-demand skill)
- Popularity
- 1.9k GitHub stars
- Last updated
- 2026-10-29
- Last graded
- 2026-10-22
Community
Discussions for Video Talkcraft
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude