Photo Video Maker For Marketing
v1.0.0create images and photos into marketing video clips with this photo-video-maker-for-marketing skill. Works with JPG, PNG, WEBP, HEIC files up to 200MB. marke...
⭐ 0· 59·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description claim converting photos into marketing videos matches the runtime instructions: session creation, uploads, SSE for generation, rendering/export endpoints. Requesting a single NEMO_TOKEN and a config path for nemo-related settings is consistent with a hosted video-rendering service.
Instruction Scope
Instructions stay within the stated purpose (create sessions, upload files, run SSE, poll render status). Important privacy impact: the agent will upload user images and any provided text to an external API (mega-api-prod.nemovideo.ai). The instructions also describe anonymous token acquisition if NEMO_TOKEN is absent and require specific attribution headers — both expected but worth noting. The SKILL.md does not instruct reading unrelated system files or credentials.
Install Mechanism
No install spec and no code files (instruction-only). This is low-risk from an install perspective because nothing is written to disk by an installer.
Credentials
Only NEMO_TOKEN (primary credential) is requested, which is proportional for a remote API service. The metadata also mentions a nemo config path (~/.config/nemovideo/), which is plausible but not strictly required by runtime instructions. No unrelated secrets or broad system credentials are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modification of other skills. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Scan Findings in Context
[no_findings] expected: The regex scanner found nothing because this is an instruction-only skill (no code files). That is expected; the primary security surface is the SKILL.md instructions.
Assessment
This skill is coherent for turning photos into marketing videos, but it will upload any images and text you provide to an external service (mega-api-prod.nemovideo.ai). Only provide non-sensitive images/content unless you trust that service. If you don't have a NEMO_TOKEN, the skill will obtain an anonymous token for you — that token grants the service access to your uploads for the session. Make sure any NEMO_TOKEN you supply comes from a trusted source and avoid reusing high-privilege credentials. Review the service's privacy/terms if available, and revoke or rotate tokens you no longer use. If you need stricter control over assets, consider using an offline/local video tool instead.Like a lobster shell, security has layers — review code before you run it.
latestvk9768fh7vnznyzbz91g0c9kevs84m8mz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📸 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN