
Security News
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-Hulud
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
@callirra/cli
Advanced tools
Callirra CLI — generate images and video, browse 172 curated prompt recipes, and manage your account from the terminal. One API key for the newest image and video models.
Official Callirra CLI — generate images and videos, browse 172 curated prompt recipes, and manage your account from the terminal. One API key for the newest image and video models.
The built-in template catalogue was retired (Sep 2026), and its commands went with it: the endpoint answers an empty list, so
prompt templatesandprompt enhancecould not work. They are replaced byrecipes,recipe <slug>andscenesbelow, which read a snapshot of our own library shipped in the package.
sk-cal-...)npm install -g @callirra/cli
# or
pnpm add -g @callirra/cli
Get an API key at callirra.com, then save it once:
callirra setup-api-key sk-cal-xxxxxxxxxxxxxxxx
callirra models
callirra gen image "A cinematic product hero shot" --model nano-banana-2 --out hero.png
callirra gen video "A drone shot over mountains" --model seedance-2.5 --duration 10 --wait --out clip.mp4
# Account
callirra setup-api-key <key> # Save API key locally
callirra whoami # Show configured key + balance
callirra balance # Show balance and available credits
callirra usage --limit 10 # Show recent usage
# Models / media
callirra models # List available models
callirra gen image <prompt> # Generate an image
callirra gen video <prompt> # Create a video task
callirra videos [--limit 20] # List recent video tasks
callirra task <id> # Show task status
callirra cancel <id> # Cancel a task
# Templates / knowledge
callirra recipes [--category x] [--limit n] # Browse the 172-recipe prompt library
callirra recipe <slug> # One recipe: prompt, settings, credits, deep link
callirra scenes [slug] # The six worked Seedance 2.5 scene recipes
callirra creative [--full] # Show creative knowledge summary or full JSON
callirra upload ./frame.png --content-type image/png # Upload reference image
gen imagecallirra gen image "A cinematic product hero shot" \
--model nano-banana-2 \
--size 1024x1024 \
--out hero.png
Options: --model, --size, --n, --out, --reference <url1,url2>, --image-input <url>, --nsfw-checker, --google-search.
gen videocallirra gen video "A drone shot over mountains" \
--model seedance-2.5 \
--duration 10 \
--resolution 720p \
--mode text_to_video \
--generate-audio \
--wait \
--out clip.mp4
Options: --model, --duration, --resolution, --mode, --aspect-ratio, --generate-audio, --frame-image <url1,url2>, --input-reference <url1,url2>, --input-images <url1,url2>, --input-videos <url>, --audio-input <url1,url2,url3>, --seed <n>, --seedance-mode, --kling-mode, --minimax-mode, --camera-fixed, --kling-orientation, --background-source, --output-format mp4|mov, --return-last-frame, --audio-setting auto|origin, --nsfw-checker, --google-search, --wait, --out.
| Variable | Default |
|---|---|
CALLIRRA_API_KEY | Required unless key is saved |
CALLIRRA_API_BASE | https://api.callirra.com |
Saved key location: ~/.config/callirra/api_key.
MIT. Source: github.com/callirra-ai/cli
Start free at callirra.com
FAQs
Callirra CLI — generate images and video, browse 172 curated prompt recipes, and manage your account from the terminal. One API key for the newest image and video models.
The npm package @callirra/cli receives a total of 15 weekly downloads. As such, @callirra/cli popularity was classified as not popular.
We found that @callirra/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.

Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.