ClawHub

Viral Slideshow Automation

v1.0.0

create images or clips into shareable slideshow videos with this skill. Works with JPG, PNG, MP4, MOV files up to 200MB. TikTok creators use it for turning p...

⭐ 0· 15·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (create slideshow videos) aligns with requested env var (NEMO_TOKEN) and config path (~/.config/nemovideo/). Requiring a single service token for a cloud render backend is expected.
✓
Instruction Scope
SKILL.md details only the API flows needed for session creation, SSE-driven edits, uploads, and export polling. It instructs obtaining an anonymous token if NEMO_TOKEN is absent, creating sessions, uploading files, and polling for results. It does not tell the agent to read unrelated system files or retrieve unrelated credentials; it also instructs not to expose raw tokens in responses.
✓
Install Mechanism
No install spec or code files — instruction-only skill. No downloads or archive extraction are requested, minimizing on-disk risk.
✓
Credentials
Only a single credential (NEMO_TOKEN) and an optional config path for the service are declared. That is proportionate to a cloud-rendering integration. The SKILL.md's behavior of minting an anonymous token if none exists is consistent with this requirement.
✓
Persistence & Privilege
always is false and the skill does not request writing or changing system-wide settings or other skills' configs. Autonomous invocation is allowed (platform default) and is not by itself a concern.
Assessment
This skill appears to legitimately call a cloud rendering API and needs a service token (NEMO_TOKEN) to operate. Before installing or using it: 1) Be aware your media files will be uploaded to https://mega-api-prod.nemovideo.ai — do not upload sensitive or private material unless you trust the service and its policies. 2) The skill can mint an anonymous token (100 free credits, 7-day expiry) if no NEMO_TOKEN is provided; if you prefer control, obtain and set your own token from the provider. 3) Verify the service domain and review its privacy/terms if possible (source/homepage not provided). 4) If you are uncomfortable with sending data to an unknown backend, do not enable the skill or restrict it to non-sensitive test media. 5) If you want higher assurance, request the skill's source or more detailed provenance from the publisher; lack of a homepage or known owner reduces confidence.

Like a lobster shell, security has layers — review code before you run it.

latestvk973medqbcxj5hb2ngdba326hh84ns1e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments