ClawHub

Ai Image Creator

v1.0.0

Cloud-based ai-image-creator tool that handles generating images from text prompts for video content. Upload JPG, PNG, WEBP, SVG files (up to 200MB), describ...

⭐ 0· 61·0 current·0 all-time
by@dsewell-583h0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required env var (NEMO_TOKEN), declared config path (~/.config/nemovideo/) and the API endpoints all align with a cloud image/video rendering service; nothing requested appears unrelated to the stated purpose.
ℹ
Instruction Scope
SKILL.md confines operations to the nemovideo.ai backend (session creation, SSE chat, upload, export/polling). It also instructs the agent to auto-create an anonymous token if NEMO_TOKEN is not present. Minor ambiguity: headers include X-Skill-Platform determined from an install path — that implies reading the agent's install location, but the doc does not instruct reading other unrelated files.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files, so nothing is downloaded or written by an installer—lowest install risk.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is required and is appropriate for a cloud API. The skill instructs generating an anonymous token via the service if none is present (ephemeral, 7-day). It's not explicit whether the token should be persisted to disk/config, though metadata lists a config path; that is a small inconsistency to be aware of.
✓
Persistence & Privilege
always: false and no install actions. The skill can be invoked autonomously (default) which is expected behavior; it does not request elevated platform privileges or modify other skills/configs.
Assessment
This skill routes your prompts and any uploaded media to mega-api-prod.nemovideo.ai and requires a NEMO_TOKEN (or will request an anonymous token from the service). Before installing, confirm you trust nemovideo.ai with your media and understand their privacy/retention and billing model (anonymous tokens have limited credits and expire). Ask the publisher whether the token is persisted (and where) if you are concerned about long-lived credentials in ~/.config/nemovideo/. If you do not want autonomous calls to an external service, avoid enabling autonomous invocation or do not provide a private NEMO_TOKEN. Overall the skill appears coherent for its stated purpose, but exercise normal caution when sending private or sensitive media to an external cloud API.

Like a lobster shell, security has layers — review code before you run it.

latestvk971yhqr0m5jvsbp9rj2ts60vh84j5ak

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments