Image To Video Kiss
v1.0.0Get animated kiss video ready to post, without touching a single slider. Upload your still images (JPG, PNG, WEBP, HEIC, up to 200MB), say something like "an...
⭐ 0· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (animate still images into kiss clips) aligns with required credential (NEMO_TOKEN) and declared config path (~/.config/nemovideo/). No unrelated credentials, binaries, or install actions are requested.
Instruction Scope
SKILL.md instructs the agent to obtain or use a NEMO_TOKEN, create sessions, upload user images, and stream SSE events to the nemovideo API. These actions are within the feature scope, but they do imply sending user-supplied images and media to an external service and optionally reading install/config paths (to detect platform or store tokens). Users should understand images and session data will be transmitted to mega-api-prod.nemovideo.ai and may persist server-side.
Install Mechanism
Instruction-only skill with no install spec or code files; nothing is downloaded or written by the skill package itself.
Credentials
Only one environment credential is required (NEMO_TOKEN), which is expected for a hosted rendering service. The skill also documents a method to generate an anonymous token via the service. This token is a bearer credential for uploads and renders — treat it like a secret and avoid supplying long-lived or overly-privileged tokens.
Persistence & Privilege
always is false and the skill doesn't request elevated or persistent platform privileges. It does instruct storing session_id and possibly tokens in its config path, which is normal for sessioned cloud services.
Assessment
This skill appears coherent for making cloud-rendered kiss animations, but it will upload any images you provide to mega-api-prod.nemovideo.ai and use a bearer token (NEMO_TOKEN) for authorization. Before installing/using: 1) only upload non-sensitive photos or test images until you trust the service; 2) prefer the anonymous token flow instead of reusing high-privilege tokens; 3) confirm the service's privacy/retention policy (uploads and orphaned render jobs may persist server-side); 4) be aware the agent may inspect the declared config path and common install directories to detect platform — if you have sensitive files in those locations, consider cleaning or isolating them; 5) rotate/delete any tokens you set if you stop using the skill. If you need, request the service's security/privacy docs or a link to their official homepage before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97bjdhx2qc8sw6j710e8j9jkd84rqek
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💋 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
