Qwen Ai Video Generator
v1.0.4The qwen-ai-video-generator skill on ClawHub brings Qwen's multimodal intelligence directly into your video production workflow. Generate scene-by-scene vide...
⭐ 0· 86·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description, declared primary credential (NEMO_TOKEN), and the API host (nemovideo) line up with a cloud video generation service. The only minor mismatch: the registry summary initially reported no required config paths, while the SKILL.md declares and uses ~/.config/nemovideo/ (client_id persistence). This is explainable but worth noting.
Instruction Scope
SKILL.md instructs the agent to automatically (on first contact) read/write ~/.config/nemovideo/client_id, request an anonymous token from https://mega-api-prod.nemovideo.ai, and persist a client_id UUID. It also routes uploads and streaming calls to the nemovideo API. These actions are within scope for a video-generation skill, but they mean the skill will perform outbound network requests and upload any user files you send to a third party.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest installation risk. Nothing is downloaded or executed outside the agent's normal runtime.
Credentials
Only one required credential (NEMO_TOKEN) is declared as primary, and several other env vars are optional. Persisted client_id is a non-secret UUID. The declared env requirements are proportionate to a cloud API integration. Keep in mind the acquired anonymous token provides API access (100 free credits) and will be used to upload/process content.
Persistence & Privilege
The skill writes a small non-secret file (~/.config/nemovideo/client_id) to persist a client identifier and may cache a session token in-memory for the session. always:false (not force-included). The persistent client_id can be used to correlate requests over time (tracking/identification), which is normal for rate-limiting but is a privacy consideration.
Assessment
This skill is coherent for a cloud video-generation integration, but review and accept these facts before installing: (1) On first use the skill will create ~/.config/nemovideo/client_id (a non‑secret UUID) and make network calls to nemovideo's API to fetch an anonymous token; (2) Any videos or files you upload will be sent to https://mega-api-prod.nemovideo.ai for processing — do not upload sensitive/confidential content unless you trust nemovideo's policies; (3) The skill receives a session token (NEMO_TOKEN) which grants API access for up to 7 days; you can revoke it in nemovideo.com Settings → API Tokens; (4) There is a small metadata mismatch in the registry (config path presence) — if provenance matters, verify the skill publisher/repository and the homepage before proceeding. If you want tighter control, set NEMO_TOKEN yourself (revoke when done) or avoid uploading private media.Like a lobster shell, security has layers — review code before you run it.
latestvk97c9kapsmmn6c7kq013w2qqz583qe30
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
