ClawHub

Free Photo To Video Ai

v1.0.0

Skip the learning curve of professional editing software. Describe what you want — turn these photos into a video with transitions and background music — and...

⭐ 0· 59·0 current·0 all-time
by@francemichaell-15
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match observed behavior: the SKILL.md instructs uploading images and calling a remote render API (mega-api-prod.nemovideo.ai) to produce videos. Requiring a NEMO_TOKEN for remote API access is proportionate to the stated purpose.
ℹ
Instruction Scope
Instructions include normal actions for this purpose: creating an anonymous token, creating/using a session, uploading files (multipart or URL), streaming SSE events, polling render status, and returning download URLs. They explicitly tell the agent to read local file paths for uploads and to detect an install path (~/.clawhub or ~/.cursor) to populate an X-Skill-Platform header — reading user-supplied image files is expected, but automatic inspection of home-directory install paths is an extra side-effect to be aware of.
✓
Install Mechanism
No install spec and no code files are present; this is instruction-only so nothing is written to disk by an installer. That minimizes install risk.
ℹ
Credentials
The only declared required credential is NEMO_TOKEN (primary), which is appropriate for a third-party rendering API. Two issues to note: (1) SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata reported no required config paths — this mismatch is incoherent and should be clarified; (2) the skill auto-generates an anonymous token via an API and instructs storing session_id/token for subsequent requests but does not specify where to persist them. Ask where tokens/session IDs will be stored (in-memory only, a skill-specific config dir, or written to env/config files).
✓
Persistence & Privilege
always is false and the skill does not request autonomous 'always-on' presence beyond normal model invocation. It does request that the agent store a session_id and use NEMO_TOKEN for API calls, which is standard for this functionality.
Assessment
This skill appears to do what it claims (upload images to a cloud renderer and return a video) and only requests a single API credential (NEMO_TOKEN). Before installing: 1) Confirm where NEMO_TOKEN and session_id will be stored (memory vs written to ~/.config/nemovideo/ or environment) and whether the skill will create files in your home directory. 2) Be aware that images you upload are sent to mega-api-prod.nemovideo.ai — do not upload sensitive photos you don’t want sent to a third-party service. 3) Ask the publisher to resolve the metadata mismatch (registry says no configPaths; SKILL.md lists ~/.config/nemovideo/). 4) If you prefer explicit consent, require the skill to prompt before auto-creating tokens and before uploading any files. If these points are acceptable or clarified, the skill is internally coherent for its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk977d3cmxk55tvqg4077kzvqsx84pxtk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments