Ai Video Gif Maker
v1.0.1Create perfect GIFs from any video clip with AI — extract the best moments from video and convert them into optimized looping GIFs for social sharing reactio...
⭐ 0· 66·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill advertises extracting moments from video and producing optimized GIFs; the declared primary credential (NEMO_TOKEN) and the homepage (nemovideo.com) are coherent with a third-party API-based service. However metadata shows requires.env: [] while primaryEnv is set to NEMO_TOKEN, which is a small inconsistency: it implies the skill will use a service token even though no required env vars were listed.
Instruction Scope
This is an instruction-only skill (no code) that likely instructs the agent to upload or send user video clips to NemoVideo for processing — that behavior is consistent with the purpose but means user video content will be transmitted to an external service. The included metadata references a config path (~/.config/nemovideo/) which suggests the agent may read local configuration or stored credentials; the SKILL.md snippet does not show instructions reading unrelated system files, but you should verify the full instructions to confirm they limit file reads to the user-supplied video and the declared config path.
Install Mechanism
No install spec and no code files — lowest-risk model for installation. Nothing is downloaded or written by an installer as part of the skill package.
Credentials
Only one service credential (NEMO_TOKEN) is referenced as the primary credential, which is proportional to a third-party API integration. Two minor concerns: (1) registry metadata shows required env vars empty while primaryEnv is set — clarify whether the skill actually expects you to set NEMO_TOKEN; (2) the declared config path (~/.config/nemovideo/) could contain credentials or other user settings, so the agent may read local config beyond just the explicitly provided token.
Persistence & Privilege
The skill is not always-enabled, and it does not request elevated persistence or modify other skills. It uses the platform's normal autonomous invocation capability (disable-model-invocation: false), which is expected for skills.
Assessment
This skill appears to be a straightforward client for nemoVideo's GIF service, but before installing: 1) Confirm whether you must set NEMO_TOKEN and where you should store it (the metadata is inconsistent). 2) Understand that video files will likely be uploaded to nemovideo.com — do not send sensitive or private footage unless you trust the service and its privacy policy. 3) Check what, if anything, the skill will read from ~/.config/nemovideo/ (it may contain tokens or preferences); avoid storing unrelated secrets there. 4) Verify the service endpoint (https://nemovideo.com) uses HTTPS and review their data retention/privacy terms. If you need stronger assurance, ask the maintainer for the exact runtime steps the skill will take (which HTTP endpoints it calls, what data it sends, and whether uploads are encrypted at rest).Like a lobster shell, security has layers — review code before you run it.
latestvk979vfctf6fd414pnhxzyz9vn183twhv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
Primary envNEMO_TOKEN