ClawHub

Gif Compressor Free

v1.0.0

Get compressed GIF files ready to post, without touching a single slider. Upload your GIF files (GIF, MP4, WebM, APNG, up to 200MB), say something like "comp...

⭐ 0· 58·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description indicate a cloud GIF compressor. The single required env var (NEMO_TOKEN) and the referenced API domain (nemovideo.ai) are consistent with that purpose. The declared config path (~/.config/nemovideo/) is also service-specific and reasonable for a client that may persist session info.
ℹ
Instruction Scope
SKILL.md instructs the agent to obtain/use a NEMO_TOKEN, create sessions, upload files, poll render status, and handle SSE — all expected for a remote rendering service. It does mention deriving attribution headers from the skill's YAML frontmatter and 'detecting' install path to set X-Skill-Platform, which could cause the agent to check known install locations; that is scope-expanding but tied to telemetry/attribution rather than unrelated data exfiltration.
✓
Install Mechanism
No install spec or downloads are present (instruction-only). Nothing is written to disk by an installer; risk from install mechanism is minimal.
✓
Credentials
Only one credential (NEMO_TOKEN) is required and is the service's bearer token; this is proportionate. The metadata also lists a service-specific config path. No unrelated secrets or broad system credentials are requested.
✓
Persistence & Privilege
Skill is not always-enabled and does not request elevated or system-wide writes. It asks agents to save a session_id for job tracking (normal for remote jobs) and to avoid printing tokens; nothing indicates it would modify other skills or system settings.
Scan Findings in Context
[no_code_files_to_scan] expected: This is an instruction-only skill (SKILL.md present, no code files); the regex scanner had no code to analyze. Absence of scan findings is expected but not proof of safety.
Assessment
This skill appears coherent with a cloud GIF/video compression service. Before installing or using: 1) Verify you trust the endpoint (mega-api-prod.nemovideo.ai) and the anonymous-token flow — the token grants bearer access to the service and should be treated like a secret. 2) Prefer using ephemeral tokens or session-level tokens rather than setting NEMO_TOKEN as a permanent environment variable on shared machines. 3) Note the skill may check common install paths to populate an attribution header; if you don't want that, avoid granting file-system access or inspect what the agent will read. 4) The skill has no homepage and a source of 'unknown' in the registry metadata — if provenance matters, ask the publisher for more information or seek a version with a verifiable origin. 5) Do not paste other secrets into the chat; the skill does need file uploads (up to 200MB) and will upload them to the service for processing.

Like a lobster shell, security has layers — review code before you run it.

latestvk9777yqadz26vy54j8ef2v5etd84n8eb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🗜️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments