Wedding Invitation Video Maker Online Free
v1.2.0Create stunning wedding invitation videos for free using AI — personalized animated invitations with couple's names, wedding date and venue details, photo sl...
⭐ 0· 88·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description promise (AI-generated wedding invitation videos) matches the runtime instructions: the SKILL.md shows a curl POST to a nemovideo API endpoint and fields for names, date, venue, photos, style, etc. Requiring a service token (NEMO_TOKEN) and a config path for NemoVideo config is proportionate to a cloud generation service.
Instruction Scope
Instructions explicitly show sending user-provided details and photos to https://mega-api-prod.nemovideo.ai/api/v1/generate using an Authorization: Bearer $NEMO_TOKEN header. This is expected for the stated purpose, but it means personal data (couple names, photos, venue addresses, RSVP links, potentially guest info) will be transmitted off-device to the third-party API. The SKILL.md does not appear to instruct broad system probing, but it does reference a config path (~/.config/nemovideo/) which implies the skill may read or write local config.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing will be written to disk by an installer. That is the lowest-risk install model and matches the skill's simple API-driven design.
Credentials
Only a single primary credential (NEMO_TOKEN) is declared and is used in the sample curl; this is proportional. The metadata also lists a config path (~/.config/nemovideo/) which is reasonable for storing a token or config but does grant the skill potential access to a local config directory; ensure that directory does not contain unrelated secrets. No other unrelated environment variables or credentials are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges. It does not request modification of other skills or system-wide settings.
Assessment
This skill appears to do what it says: it calls a NemoVideo API and needs a NEMO_TOKEN. Before installing, confirm you trust the provider and domain (mega-api-prod.nemovideo.ai) because the service will receive sensitive personal data — photos, names, venue addresses, RSVP links, and possibly guest info. Check where your NEMO_TOKEN comes from and what permissions it grants, and inspect ~/.config/nemovideo/ if present to ensure no unrelated secrets are stored there. If you have privacy or compliance concerns (guest data, addresses, minors' photos), avoid uploading that information or get a written data-handling policy from the vendor. If you need higher assurance, ask the publisher for a homepage, privacy policy, and official package/source; the registry metadata currently shows no homepage and an unknown source, which reduces confidence.Like a lobster shell, security has layers — review code before you run it.
latestvk977ctgbpe9tx55wysxsnf6m8d83s0an
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💍 Clawdis
Primary envNEMO_TOKEN