Image To Video Draw Things

v1.0.0

Get animated video clips ready to post, without touching a single slider. Upload your still images (JPG, PNG, WEBP, GIF, up to 200MB), say something like "an...

0· 42·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description describe a cloud-based image→video renderer and the skill only requires a NEMO_TOKEN and directs traffic to the nemovideo.ai API—this is coherent and expected.
Instruction Scope
SKILL.md limits actions to creating/refreshing a session token, uploading images, polling render status, and fetching outputs. It does instruct the agent to read the skill's YAML frontmatter and detect install path for attribution (harmless for the stated purpose). It does not request unrelated filesystem reads or broad data exfiltration.
Install Mechanism
Instruction-only skill with no install spec or downloaded code; nothing is written to disk by an installer in the skill bundle itself.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv). That matches a cloud API service. The skill can obtain an anonymous token from the service when no token is present, which is consistent with its described behavior.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system privileges. It stores session IDs for job operations (normal for this workflow) and does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uploads images to the nemovideo.ai backend, creates sessions, and returns rendered videos. Before installing, consider: (1) uploads go to an external service (nemovideo.ai) — don't send sensitive or private images unless you trust that service and its privacy policy; (2) you can supply your own NEMO_TOKEN or let the skill request an anonymous token (100 free credits, 7-day expiry) — choose which you prefer; (3) the SKILL.md mentions reading its own YAML frontmatter and detecting install path for attribution (benign), and there is a minor metadata inconsistency about declared config paths in the frontmatter vs registry metadata — not dangerous but worth noting. If you need higher assurance, ask the publisher for a homepage, privacy policy, or explicit terms for uploaded content handling.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a2wsybbwny6b7v11kq1v7rh84t4ce

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎨 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments