alicloud-ai-video-wan-video

Benign. The skill’s footprint is coherent with its purpose: it uses an official SDK, requires standard API authentication, handles a reference image as part of the i2v flow, and produces conventional output metadata. Data flows are typical for an API-backed video generation workflow, with credentials and outputs properly scoped to the external DashScope service. No evidence of malicious data exfiltration, credential harvesting, or supply-chain risks beyond standard SDK usage.