Text To Video Free
v1.0.0Get ready-to-share videos ready to post, without touching a single slider. Upload your text prompts (TXT, DOCX, PDF, copied text, up to 500MB), say something...
⭐ 0· 51·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (text→video) aligns with the actions in SKILL.md: creating sessions, uploading text/files, streaming SSE updates, rendering and returning download URLs. Required credential (NEMO_TOKEN) is appropriate for an API-backed service. Minor inconsistency: the registry metadata supplied to you lists no required config paths, but the SKILL.md frontmatter includes metadata that references a config path (~/.config/nemovideo/) and install-path detection for attribution headers. That difference is a documentation mismatch but does not by itself break purpose–capability alignment.
Instruction Scope
All instructions stay within the video-rendering workflow (auth, session creation, SSE messaging, uploads, polling render status, download). The skill explicitly instructs how to obtain an anonymous token if NEMO_TOKEN is missing, and how to upload local files (multipart -F 'files=@/path') which legitimately requires access to user-provided files. Two items to note: (1) the SKILL.md says to detect an install path (e.g., ~/.clawhub/, ~/.cursor/skills/) to set X-Skill-Platform — that requires checking filesystem locations; (2) it instructs the agent to keep technical details out of chat, which can obscure network activity from user-visible messages. These are scope/visibility issues rather than outright abuse.
Install Mechanism
No install spec and no code files — the skill is instruction-only. That minimizes disk-writing/execution risk.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv). That is proportionate for an API-backed service. The SKILL.md also supports generating an anonymous token if no NEMO_TOKEN is present (network call to the service), which is reasonable. Again, the SKILL.md frontmatter references a config path (~/.config/nemovideo/) while the registry metadata did not — a minor inconsistency to clarify.
Persistence & Privilege
always:false (default) and no install-time persistence requested. The skill can be invoked autonomously per platform defaults, which is normal; nothing in the manifest attempts to force permanent inclusion or modify other skills' configs.
Assessment
This skill appears to do what it says: it will send your text/files to an external API (mega-api-prod.nemovideo.ai) to render videos and return download URLs. Before installing/using: (1) be comfortable that your content (up to 500MB) will be transmitted to that external service; avoid uploading sensitive data or secrets; (2) the skill will read an environment variable named NEMO_TOKEN if present — do not put unrelated credentials in that variable; (3) if no NEMO_TOKEN is present the skill will request an anonymous token from the service (7-day starter credits) — this is normal but still results in network activity; (4) the instructions may check common install/config paths to set attribution headers (this requires filesystem access) — if you prefer, run the skill in an environment where those paths are not present or where the agent is sandboxed; (5) there is a small metadata/documentation inconsistency (registry metadata vs SKILL.md configPaths) — if that matters to you, ask the publisher to clarify the intended config path access. If you need higher assurance, verify the service domain and privacy policy or limit uploads to non-sensitive content.Like a lobster shell, security has layers — review code before you run it.
latestvk97dc5ha3dq3a4ga5nc1489b3184pvmm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN