Ai Image To Video Online
v1.0.0convert still images into animated video clips with this skill. Works with JPG, PNG, WEBP, HEIC files up to 200MB. social media creators use it for convertin...
⭐ 0· 20·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to convert images to animated video and all required items map to that purpose: a single service token (NEMO_TOKEN) and API calls to a named backend. One minor inconsistency: the SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths — this is a documentation mismatch but does not materially change capability.
Instruction Scope
Instructions are explicit about checking NEMO_TOKEN, creating an anonymous token by POSTing a UUID to https://mega-api-prod.nemovideo.ai, creating sessions, uploading files, using SSE for edits, polling exports, and returning download URLs. Those actions are expected for a cloud render service. Note: the skill will transmit user image files and job metadata to the remote domain—privacy of content depends on that service. It also derives an X-Skill-Platform header by inspecting install paths, which implies reading the agent's install path but not other unrelated secrets.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk or downloaded by the skill itself, lowering install-time risk.
Credentials
Only one declared credential (NEMO_TOKEN) is required, which is proportionate to a cloud API. The SKILL.md also includes a fallback that requests an anonymous token from the service if NEMO_TOKEN is missing — this is reasonable but means the skill will contact the remote API and obtain a short-lived token on behalf of the user. The earlier-mentioned config path in frontmatter is inconsistent with the registry listing and should be clarified.
Persistence & Privilege
always:false and no requests to modify other skills or system-wide settings. The skill maintains session_id state for jobs but does not request elevated or persistent host privileges. Note that disable-model-invocation is false (normal), so the agent can call the skill autonomously when permitted.
Assessment
This skill appears to be what it says: a cloud image→video converter that needs a NEMO_TOKEN (or will obtain an anonymous token) and will upload your images to https://mega-api-prod.nemovideo.ai for processing. Before installing, consider: (1) privacy — uploaded images and any metadata leave your machine and are processed by the remote service; avoid sending sensitive images unless you trust the service and its retention policy; (2) token management — if you provide a personal NEMO_TOKEN, treat it like a secret and revoke it if you suspect misuse; (3) metadata mismatch — the SKILL.md references a config path (~/.config/nemovideo/) that the registry did not list; ask the publisher which path (if any) will be written to and where tokens are stored; (4) verify the remote domain and service terms if you care about copyright or retention. If you need more assurance, request the publisher/source, privacy policy, or example API responses to review.Like a lobster shell, security has layers — review code before you run it.
latestvk9761429zdm5nvzeyeyet0gzfn84s4em
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN