Ai Music Generator Free Ab2n 0330
v1.0.0Tired of searching royalty-free music libraries only to find tracks that don't quite fit your video's mood? The ai-music-generator-free skill creates origina...
⭐ 0· 53·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, declared API domain, required env var (NEMO_TOKEN), and config path (~/.config/nemovideo/) align with a cloud-based music-generation service. The skill only asks for the credential needed to authenticate to the NemoVideo backend.
Instruction Scope
SKILL.md instructs the agent to check NEMO_TOKEN, generate/read a client_id at ~/.config/nemovideo/client_id, call NemoVideo auth and session endpoints, upload user-supplied video files, and stream SSE for generation results. These actions are within scope for a cloud music-generation workflow. Minor caution: the guide constructs a workspace/claim URL that embeds the token as a query parameter (https://nemovideo.com/workspace/claim?token=$TOKEN...), which can leak credentials via browser history or logs; the docs also instruct not to expose tokens, creating a tension the user should be aware of.
Install Mechanism
No install spec or code files are present; this is instruction-only so nothing is downloaded or written by an installer. That reduces the on-disk risk surface.
Credentials
Only NEMO_TOKEN is required and is the primary credential — appropriate for a cloud API client. The skill also reads/writes a local client_id at ~/.config/nemovideo/, which is reasonable for anonymous client identification. Warn: tokens saved to files or embedded in URLs can be accidentally exposed; ensure you understand what the token permits and how to revoke it.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. The only persistent modification described is writing/reading ~/.config/nemovideo/client_id which is scoped to the service. Autonomous invocation is enabled (default) but that is expected for skills.
Assessment
This skill appears to do what it says: connect to NemoVideo, upload video, and request AI-generated music using a NEMO_TOKEN. Before installing or using it: 1) confirm you trust nemovideo.com and the API hostname (mega-api-prod.nemovideo.ai); 2) prefer creating a scoped/ephemeral token or use an anonymous token as described, and learn how to revoke it; 3) avoid embedding long-lived secrets in URLs (tokens in query strings can be logged or leaked); 4) only upload media you are comfortable sharing with the service; and 5) because this is instruction-only, the agent will make live network requests — do not provide production or high-privilege credentials to this skill unless you explicitly trust the provider and understand the token's permissions.Like a lobster shell, security has layers — review code before you run it.
latestvk973w7k62qxqm0kdn542vyrws583wbrj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN