React Component Generator Online
v1.0.0Get coded component videos ready to post, without touching a single slider. Upload your component description text (MP4, MOV, AVI, WebM, up to 200MB), say so...
⭐ 0· 59·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (generate React-component preview videos) aligns with the actions in SKILL.md: creating a session, uploading media, driving SSE-based generation, and exporting MP4s. The required environment variable (NEMO_TOKEN) is appropriate. Minor inconsistency: the SKILL.md frontmatter lists a configPaths entry (~/.config/nemovideo/) while the registry metadata reported no required config paths; this is likely benign but is a mismatch you may want clarified.
Instruction Scope
Instructions are scoped to the service: token acquisition (anonymous or provided), session creation, upload, SSE streaming, polling for render status, and returning download URLs. The skill does require reading/generating a client ID and may inspect install path to set the X-Skill-Platform header, which is reasonable for attribution but worth noting.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk or fetched at install time. This is the lowest-risk install mechanism.
Credentials
Only NEMO_TOKEN is required and declared as primaryEnv, which matches the API usage. The SKILL.md also references a local config path (~/.config/nemovideo/) in its frontmatter — the registry said none — so the skill might read that path if present; this should be confirmed. No unrelated secrets (AWS, GitHub, etc.) are requested.
Persistence & Privilege
always is false and the skill does not request elevated, persistent platform-wide privileges or modify other skills. Autonomous invocation is allowed (default) but that is expected for skills that interact with a remote API.
Assessment
This skill appears to do what it says: it talks to a nemovideo backend, uploads media, and returns rendered MP4s. Before installing or using it, consider: (1) only the NEMO_TOKEN is needed — you can provide one or the skill will request an anonymous token — but avoid supplying any sensitive long-lived credentials; (2) your uploaded files will be sent to https://mega-api-prod.nemovideo.ai (check that you are comfortable sharing the content and review the service’s privacy/terms); (3) clarify the small metadata mismatch: SKILL.md mentions ~/.config/nemovideo/ (the registry did not), so ask whether the skill will read that local config directory; (4) revoke or rotate tokens after use if you suspect exposure. If you need higher assurance, ask the publisher for a privacy policy, a homepage, or a code release you can audit.Like a lobster shell, security has layers — review code before you run it.
latestvk970gem205zdtvn6qzzhqf3j6d84qw95
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
⚛️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN