Image To Video Free

v1.0.0

Tired of static photos that fail to capture attention in a scroll-happy world? The image-to-video-free skill transforms your still images into dynamic, anima...

0· 40·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the behavior in SKILL.md: the skill calls a remote image-to-video API. The single required env var (NEMO_TOKEN) is coherent as the API bearer token. No unrelated credentials or binaries are requested.
Instruction Scope
Instructions stay within the image→video workflow (session creation, SSE message streaming, upload, render/export/poll). One small note: the skill asks the agent to detect an install path to set X-Skill-Platform (checks like ~/.clawhub or ~/.cursor/skills). That may require probing the agent filesystem or environment to choose the header value — this can disclose platform/install-path metadata to the remote API. Otherwise the instructions do not request other system files or unrelated env vars.
Install Mechanism
No install spec and no code files — instruction-only. Nothing is written to disk or downloaded by the skill itself, which minimizes supply-chain risk.
Credentials
Only one credential is declared (NEMO_TOKEN) and it's necessary for the described API calls. The skill also supports obtaining an anonymous starter token from the same service if no token is present; no other credentials are requested.
Persistence & Privilege
The skill is not always-enabled and does not request elevated persistence or system-wide configuration changes. Autonomous invocation is allowed (platform default) but there are no instructions to alter other skills or system configs.
Assessment
This skill appears coherent and focused: it calls an external nemo-api service to render videos and needs one API token (NEMO_TOKEN). Before installing, consider: - Privacy: images (and possibly metadata/headers) will be uploaded to https://mega-api-prod.nemovideo.ai. Don’t send sensitive images unless you trust the service and its terms. - Tokens: if you provide a personal NEMO_TOKEN, treat it like any API secret — rotate/revoke if needed. Prefer using the anonymous starter token flow for one-off or low-sensitivity work. - Metadata leakage: the skill adds attribution headers and attempts to detect an install path (e.g., ~/.clawhub) to set X-Skill-Platform — that may disclose environment/install metadata to the API. If that concerns you, avoid supplying a persistent token and use the anonymous flow, or confirm how the agent will detect/set that header. - Credits and billing: the SKILL.md mentions credits and both free export and credit checks; verify the provider’s billing/limits before heavy use. No code is installed locally, but network calls are required. If you need stronger assurance, ask the publisher for a privacy/TOS link or for details on what the API stores and how long generated media and tokens persist.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dq4f4dkf1grfptyd5jkhpxx841fgm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments