ClawHub

Ai Image To Video Generator Free

v1.0.0

Tell me what you need and I'll transform your still images into dynamic, eye-catching videos — no cost, no complicated setup. This ai-image-to-video-generato...

⭐ 0· 71·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the actions in SKILL.md: calls to nemovideo endpoints, upload and render endpoints, and handling of sessions/credits are expected. The declared primary credential (NEMO_TOKEN) and config path (~/.config/nemovideo/) are appropriate for a hosted rendering service. Minor inconsistency: registry metadata shows required env vars empty while primaryEnv is set to NEMO_TOKEN.
ℹ
Instruction Scope
Instructions stay within the photo→video workflow (create session, upload images, send SSE messages, query credits/state). The skill instructs writing ~/.config/nemovideo/client_id and storing a session_id for subsequent requests — reasonable for rate-limiting and session management. It also instructs detecting an install path to set X-Skill-Platform, which requires probing standard install directories; this is benign for attribution but means the agent will inspect certain filesystem paths. The SKILL.md instructs not to display raw API responses or tokens to the user — sensible as privacy guidance, though worth noting.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is downloaded or written by an install process. Lowest-risk install posture.
ℹ
Credentials
The only credential involved is NEMO_TOKEN (declared as primary). The skill can obtain an anonymous token itself if NEMO_TOKEN is not set, which reduces burden on users. The registry metadata omission (required env empty vs primaryEnv present) is an administrative inconsistency that should be corrected but does not indicate extra secret demands. No other unrelated credentials are requested.
ℹ
Persistence & Privilege
always:false and agent invocation is normal. The skill will create/read ~/.config/nemovideo/client_id (UUID) and may persist session_id for subsequent calls; this is limited to the skill's own config path. No evidence it attempts to modify other skills or system-wide settings.
Assessment
This skill looks like a legitimate frontend for NemoVideo. Before installing, consider: (1) it will call https://mega-api-prod.nemovideo.ai and may upload images you provide — avoid uploading sensitive images you don't want sent anywhere; (2) it will create ~/.config/nemovideo/client_id (a UUID) and may persist a session_id — check that file if you want to confirm contents; (3) you can provide your own NEMO_TOKEN or let the skill obtain an anonymous 7‑day token; only supply an existing token if you trust the service; (4) the skill detects install path for attribution (reads standard directories) — if you prefer, run it in an environment where those paths are empty; (5) the registry metadata has a small inconsistency (primaryEnv present but required env list empty) — not dangerous but worth fixing. If any of the network endpoints or domain look unfamiliar, verify the NemoVideo service independently before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cynn104nzevraavt59g2k8d83xk1f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Primary envNEMO_TOKEN

Comments