Photo Video Maker En Espanol
v1.0.0turn photos and images into slideshow video MP4 with this photo-video-maker-en-espanol skill. Works with JPG, PNG, HEIC, WebP files up to 200MB. Spanish-spea...
⭐ 0· 61·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (turn photos into MP4 slideshows) aligns with the only credential it requests (NEMO_TOKEN) and the documented API endpoints on mega-api-prod.nemovideo.ai. One small inconsistency: the registry metadata earlier listed no required config paths, but the SKILL.md YAML metadata declares a config path (~/.config/nemovideo/). This mismatch is minor but worth noting.
Instruction Scope
SKILL.md gives explicit runtime instructions that stay within the service's scope: authenticate (or obtain an anonymous token), create a session, upload files, and poll export endpoints. The skill will upload user-supplied files (local paths or URLs) to the external API and will store session_id and (if generated) the token. That behaviour is expected for this functionality but is privacy-sensitive — the agent will send your images to nemovideo.ai.
Install Mechanism
This is an instruction-only skill with no install steps or remote downloads, so there is no installation risk from fetching/executing code.
Credentials
Only one credential (NEMO_TOKEN) is required, which is proportionate for a hosted rendering service. However, the skill will auto-generate an anonymous token if NEMO_TOKEN is not present and then store/use it—this automatic token creation/storage is functional but should be disclosed to users. Also note the minor metadata/config-path mismatch (~/.config/nemovideo/) between SKILL.md and registry.
Persistence & Privilege
No elevated privileges requested: always:false, agent invocation allowed (normal). The skill stores its own session state/token for service calls but does not request system-wide changes or other skills' credentials.
Assessment
This skill appears to do what it says: it uploads photos to an external nemo video backend and returns rendered MP4s. Before installing/using it, consider: (1) privacy — your photos will be uploaded to https://mega-api-prod.nemovideo.ai; don't upload sensitive images unless you trust that service; (2) token handling — the skill will use NEMO_TOKEN if provided, or automatically obtain and store an anonymous token (100 free credits, 7-day validity) if not; if you prefer control, supply your own token and review token lifetime/permissions; (3) metadata mismatch — SKILL.md references a local config path (~/.config/nemovideo/) not reflected in registry metadata; ask the publisher to clarify if the skill will read or write that path; (4) no code is present — behavior is entirely defined by SKILL.md, so ask for a publisher/homepage if you want accountability or an audit trail.Like a lobster shell, security has layers — review code before you run it.
latestvk972p68n1bmdkk0p6k617fep9n84myt2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📸 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
