Ai Tool For Video Generation
v1.0.0Skip the learning curve of professional editing software. Describe what you want — generate a 30-second video of a product launch with background music and t...
⭐ 0· 45·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, endpoints, and required credential (NEMO_TOKEN) all align with an external AI video-generation service (mega-api-prod.nemovideo.ai). Declared config path (~/.config/nemovideo/) and primaryEnv match the service purpose. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md instructs the agent to obtain/consume a NEMO_TOKEN (either from env or via an anonymous-token API call), create sessions, upload user-provided media, stream SSE responses, and poll render status — all within the service domain. It also asks the agent to read the skill file's YAML frontmatter and inspect install-paths (~/.clawhub, ~/.cursor/skills/) to set an X-Skill-Platform header; reading other agent install paths is telemetry/attribution behavior that is not strictly required for video generation and may reveal some host-environment information.
Install Mechanism
No install spec or code is shipped; this is an instruction-only skill. Nothing is downloaded or written to disk by the skill itself (risk is limited to runtime network calls performed by the agent).
Credentials
Only a single credential (NEMO_TOKEN) is required, which is expected for a remote rendering API. The metadata also references a config path (~/.config/nemovideo/), which is proportional. Minor overreach: instructions to probe other agent paths for attribution are not necessary for functionality and could disclose presence/structure of those directories.
Persistence & Privilege
The skill does not request always: true and does not modify other skills or system-wide settings. It uses session tokens from the service but does not demand long-lived elevated host privileges.
Assessment
This skill appears to do what it says: call the nemovideo.ai endpoints and upload user media using a NEMO_TOKEN. Before installing, confirm you trust the nemovideo.ai service (uploads and prompts will be sent to their servers). Be cautious about sending sensitive or private media. Note the skill will use any NEMO_TOKEN present in the environment and can obtain an anonymous token itself by calling the service (ephemeral token with limited credits). The only minor privacy/telemetry behavior to consider is that the skill asks the agent to inspect install paths (~/.clawhub, ~/.cursor/skills/) to set an attribution header — if you prefer not to reveal that information, run the skill in an environment without those directories or with NEMO_TOKEN provided explicitly. If you need higher assurance, request the skill author to remove the install-path probing or to document exactly what local files are read and why.Like a lobster shell, security has layers — review code before you run it.
latestvk97b1qhmc1r3p9c1ey4dxyy13984qaa8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN