Vidmuse Ai
v1.0.0content creators create video clips into music-synced videos using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB, renders on cloud GPUs at 1080p, and r...
⭐ 0· 58·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to render videos on a Nemovideo backend and only requires a Nemo token — that matches the described purpose. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) and platform-detection via install paths, but the registry metadata shown to us did not list those config paths; this is likely benign but worth noting.
Instruction Scope
Runtime instructions are focused on authenticating, creating a session, uploading files, sending SSE messages, polling render status, and returning download URLs — all coherent with video rendering. The skill instructs the agent to automatically obtain an anonymous token if NEMO_TOKEN is not present and to persist session_id/token for subsequent requests. It also asks the agent to detect install path presence for attribution headers (reads filesystem paths), which is reasonable for attribution but does require filesystem checks.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is downloaded or written by an installer, so install risk is low.
Credentials
Only one credential (NEMO_TOKEN) is required and it is directly used for Authorization to the stated backend. The skill will also generate an anonymous token when none is provided; this behavior is documented in the instructions.
Persistence & Privilege
always:false (no forced presence). The skill stores session tokens and IDs for its own API interactions, which is normal. It does not request system-wide privileges or modifications to other skills.
Assessment
This skill appears to do what it says: it uploads user video/audio to the nemovideo.ai backend and returns rendered MP4s. Before installing or using: (1) confirm you trust the backend domain (https://mega-api-prod.nemovideo.ai) and review its privacy/terms for uploaded media; (2) avoid uploading sensitive content to third-party renderers; (3) if you prefer control, provide your own NEMO_TOKEN rather than letting the skill create an anonymous token; (4) note the skill may inspect home directories to detect platform/install paths for attribution headers — ensure no sensitive files are stored under the listed config path. If any of these concerns matter, ask the skill author for a privacy statement or an option to disable anonymous token creation and filesystem checks.Like a lobster shell, security has layers — review code before you run it.
latestvk976pjjnbxqt9vzm3zmn65wewn84kh9q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN