ClawHub

Free Gif Compressor

v1.0.0

web designers, marketers, social media managers compress GIF files into optimized GIF files using this skill. Accepts GIF, MP4, WebM, APNG up to 200MB, rende...

⭐ 0· 86·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (compress GIFs -> export MP4/WebM, cloud GPU rendering) matches the declared runtime actions: creating sessions, uploading media, SSE text-event streaming, and calling render/export endpoints. Requesting a single service token (NEMO_TOKEN) is appropriate for this integration.
ℹ
Instruction Scope
SKILL.md instructs the agent to create/renew an anonymous token, create a session, upload files (multipart or via URL), use SSE for interactive edits, and poll render status. These steps are in-scope for a remote processing service. Note: the instructions require sending user media and session metadata to an external API (mega-api-prod.nemovideo.ai), so sensitive or private media will be transmitted off-device — this is expected but a privacy consideration.
✓
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing is written to disk by the skill itself. This is the lowest-risk install profile.
ℹ
Credentials
The only required environment variable is NEMO_TOKEN (declared as primary), which is appropriate for bearer-auth to the described API. The frontmatter also lists a config path (~/.config/nemovideo/) that is not explicitly referenced in runtime instructions; this isn't necessarily malicious but is worth noting because it suggests the skill may look for local config if present.
✓
Persistence & Privilege
always is false and the skill is user-invocable. It does not request permanent/always-on presence nor system-wide changes. It stores transient session_id values per the workflow, which is normal for this type of API integration.
Assessment
This skill appears to be what it claims: a cloud-based GIF/video compression helper that requires a NEMO_TOKEN and uploads files to mega-api-prod.nemovideo.ai. Before installing/use: (1) Be aware that any media you send will be uploaded to a third-party service — avoid sending sensitive content. (2) Treat NEMO_TOKEN as a secret; only provide a token you control. (3) The skill can create anonymous tokens for short-lived use — prefer that for testing. (4) Confirm the service/domain is trustworthy (privacy policy, retention of uploaded media) before sending private data. (5) If you want to avoid any external uploads, do not install this skill or avoid invoking upload/export actions.

Like a lobster shell, security has layers — review code before you run it.

latestvk9747vwrjahr9abt9mzrj1ks2n84km52

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🗜️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments