ClawHub

Ai Free Image To Video Generator

v1.0.0

Turn static images into captivating video clips without spending a dime using the ai-free-image-to-video-generator. Upload any still photo and watch it come...

⭐ 0· 38·0 current·0 all-time
by@dsewell-583h0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description say it animates images via a cloud backend; the skill only requires a NEMO_TOKEN and describes API endpoints for session creation, upload, rendering and credits — these are appropriate and expected for a cloud image-to-video service. The only extra filesystem access is a single client_id under ~/.config if no token is present, which is plausible for anonymous provisioning.
ℹ
Instruction Scope
Instructions explicitly tell the agent to look for NEMO_TOKEN in the environment, or else read/write ~/.config/ai-free-image-to-video-generator/client_id and call the service's anonymous-token endpoint to obtain a token. It also instructs detecting install path (checking ~/.clawhub and ~/.cursor/skills/) to set an attribution header and to upload user-supplied images to the remote API. These actions are within the expected scope but do involve reading/writing a single config file and transmitting user images to an external service — a privacy consideration, though coherent with the stated purpose.
✓
Install Mechanism
No install spec and no code files (instruction-only). This is low-risk from an install perspective: nothing is downloaded or written beyond the described config file.
✓
Credentials
Only a single external credential (NEMO_TOKEN) is declared as required and as the primary credential. The SKILL.md only references that token and no unrelated secrets or system credentials, so requested environment access is proportionate.
ℹ
Persistence & Privilege
The skill persists a client_id to ~/.config/ai-free-image-to-video-generator/client_id if no token is provided and uses that to obtain a short-lived token. It does not request always:true or system-wide config changes. The agent is allowed autonomous invocation by default (platform normal), so the combination of stored client_id + autonomous invocation means the skill could obtain tokens across sessions without repeated user prompts — expected but worth user attention.
Assessment
This skill appears coherent for a cloud-based image→video service, but check a few things before installing: - Confirm you trust the remote domain (mega-api-prod.nemovideo.ai) and ideally verify an official homepage or privacy policy; the skill metadata lists no homepage or source. - Be aware it will upload any images you give it to that external API — do not upload images containing sensitive personal or proprietary data unless you accept that. - If you prefer control, supply your own NEMO_TOKEN (from the service) rather than letting the skill create one; that token is the only credential required and can be revoked. - The skill will create ~/.config/ai-free-image-to-video-generator/client_id if no token exists; this is small persistence but allows the skill to re-obtain anonymous tokens across sessions. - Monitor and review token use and revoke the token if you see unexpected activity. If you want higher assurance, ask the publisher for a homepage, privacy policy, or source repository and confirm the API domain is official; those details would raise confidence to high.

Like a lobster shell, security has layers — review code before you run it.

latestvk971gqwmt900d45gabcwzbx3cx8413jc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments