ClawHub

Best Photo Video Maker

v1.0.0

turn photos and images into polished video slideshow with this best-photo-video-maker skill. Works with JPG, PNG, HEIC, WebP files up to 200MB. social media...

⭐ 0· 56·0 current·0 all-time
by@mhogan2013-9
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the actions in SKILL.md (upload images, create render jobs, return MP4). The single declared credential (NEMO_TOKEN) maps to the described API (nemovideo.ai) and the configPaths entry (~/.config/nemovideo/) is consistent with storing service-related settings.
ℹ
Instruction Scope
Runtime instructions focus on authenticating, creating a session, uploading files, streaming SSE, polling render status, and returning download URLs — all within the stated video-generation purpose. The skill does instruct the agent to detect install path (~/.clawhub/, ~/.cursor/skills/) and references a user config path; this requires reading certain local paths (to set X-Skill-Platform and possibly skill config) but does not instruct broad arbitrary file reads or exfiltration to unrelated endpoints.
✓
Install Mechanism
No install spec or external packages are requested (instruction-only skill), so nothing is written to disk by an installer. This is the lowest-risk install profile.
✓
Credentials
Only one credential (NEMO_TOKEN) is required and is appropriate for the described API. The SKILL.md also documents a fallback anonymous-token flow (POST to nemovideo.ai) so a user-supplied token is optional. The presence of a declared config path is reasonable for a media-processing integration.
✓
Persistence & Privilege
The skill is not always-on and does not request elevated system privileges or modifications to other skills. It can be invoked autonomously (platform default), which is expected for this kind of service and is not by itself a concern.
Assessment
This skill appears internally consistent with a cloud-based video-rendering API. Before installing: be aware that using it will send images and job metadata to https://mega-api-prod.nemovideo.ai; if you don't provide a NEMO_TOKEN the skill can obtain a short-lived anonymous token on your behalf. The skill may read small, specific local paths to detect platform/config (e.g., ~/.config/nemovideo/, ~/.clawhub/, ~/.cursor/skills/) to populate attribution headers — avoid installing if you don't want any skill reading those locations. If you care about privacy or long-term access, supply a token you control and revoke it after use, or avoid sending sensitive images. Because the source is unknown, consider verifying the service domain and reviewing nemo's privacy/terms before uploading private media.

Like a lobster shell, security has layers — review code before you run it.

latestvk974hr65x8tchay34p32kch0f984nrzn

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments