ClawHub

Ai Image Editor Ab2n 0330

v1.0.0

Transform ordinary photos into polished, professional visuals with the ai-image-editor skill on ClawHub. This skill handles background removal, smart retouch...

⭐ 0· 76·0 current·0 all-time
by@bwbernardweston18
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (AI image editing) match the declared primary credential (NEMO_TOKEN) and the SKILL.md which calls the NemoVideo API for uploads, edits, credits, and exports. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
Runtime instructions confine operations to the NemoVideo integration: check NEMO_TOKEN, create/read ~/.config/nemovideo/client_id, obtain an anonymous token if missing, create a session, upload images, and use SSE for edits. These actions are within the skill's stated purpose, but the skill also instructs the agent to detect the install platform by checking install paths (e.g., ~/.clawhub, ~/.cursor/skills) — reading those install paths is not listed in metadata's configPaths and is a small scope expansion worth noting.
✓
Install Mechanism
No install spec or bundled code is provided (instruction-only), so nothing is downloaded or written during an install step beyond what the runtime instructions ask to save at ~/.config/nemovideo/. This is the lowest-risk install model.
✓
Credentials
Only one environment variable (NEMO_TOKEN) is required and is appropriate for a cloud-backed image-editing service. The SKILL.md explains how it can obtain an anonymous token if none is present, and it declares the same config path where it will store a client_id. No unrelated secrets are requested.
✓
Persistence & Privilege
always:false and agent invocation is normal. The skill writes its own Nemo config (~/.config/nemovideo/client_id) which is declared in metadata; it does not request elevated or cross-skill system privileges.
Assessment
This skill appears internally consistent and is instruction-only (no hidden code). Before installing, verify you trust NemoVideo (https://nemovideo.com and the API host mega-api-prod.nemovideo.ai) because the skill will upload your images to that service and will create/read ~/.config/nemovideo/client_id and obtain/store a NEMO_TOKEN if one isn’t provided. Note the skill may produce a claim URL that includes the token in the query string — treat that URL as sensitive. If you prefer tighter control, create and supply your own NEMO_TOKEN from NemoVideo rather than relying on the anonymous-token flow. Finally, consider asking the publisher to explicitly list the install-path checks (~/.clawhub, ~/.cursor/skills) in metadata if you want full transparency about what filesystem locations the skill may inspect.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ea2qvzq8ejjc5f4haa3fw3183whdg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments