ClawHub

Best Generator Free

v1.0.0

Skip the learning curve of professional editing software. Describe what you want — generate a 30-second video from my script with background music and visual...

⭐ 0· 60·0 current·0 all-time
by@linmillsd7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description match the runtime instructions: the SKILL.md describes a cloud API for generating video, uploading media, checking credits, and exporting — all of which justify a single service token (NEMO_TOKEN). One minor inconsistency: the registry metadata reported 'required config paths: none' while the skill frontmatter metadata includes a config path (~/.config/nemovideo/). This is likely a small metadata mismatch, not a functional contradiction.
ℹ
Instruction Scope
Instructions stay on-task: they look for NEMO_TOKEN, create a session, upload media, use SSE for streaming, and poll render status. The skill will (expectedly) POST user media and prompts to https://mega-api-prod.nemovideo.ai and may obtain an anonymous token if none is present. This exposes user content to a third-party service — intended for the skill's purpose but important privacy/consent context. The SKILL.md explicitly instructs not to leak tokens or raw API output, which is appropriate.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal install risk (nothing is written to disk by the skill itself).
✓
Credentials
Only one credential is requested (NEMO_TOKEN), which is proportionate to a cloud API integration. The SKILL.md also describes obtaining an anonymous token if none is provided — consistent with needing an ephemeral service credential. No unrelated secrets or broad system credentials are requested.
✓
Persistence & Privilege
No elevated persistence is requested (always:false). The skill does not ask to install itself, modify other skills, or change system-wide agent settings. It only uses in-session tokens and API calls.
Assessment
This skill appears to do what it says: it will send your prompts and any uploaded media to a third-party video-rendering API (mega-api-prod.nemovideo.ai) and requires a NEMO_TOKEN (or will request an anonymous token). Before installing or using it: 1) Confirm you trust the destination domain/owner (no homepage or publisher info is provided). 2) Avoid uploading sensitive material — your media and prompts are transmitted to that remote service. 3) If you set NEMO_TOKEN in your environment, ensure it is scoped appropriately; if you let the skill fetch an anonymous token, understand it issues short-lived credentials with limited credits. 4) Be aware of the small metadata mismatch (declared configPaths in SKILL.md vs registry listing) — this is likely harmless but indicates the manifest may not have been fully curated. If any of these points concern you, ask the skill publisher for a homepage/terms/privacy link and confirmation of how uploaded data is stored/retained before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97658rb6b2mm2qjwr98pw3m8x84pzpk

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments