ClawHub

Ai Music Video Creator

v1.0.0

Cloud-based ai-music-video-creator tool that handles generating music videos from a song and photos. Upload MP3, WAV, JPG, PNG files (up to 500MB), describe...

⭐ 0· 61·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description, required NEMO_TOKEN, and the declared config path (~/.config/nemovideo/) align with a cloud video-rendering service. No unrelated binaries or extraneous credentials are requested.
ℹ
Instruction Scope
The SKILL.md instructs the agent to look for NEMO_TOKEN and, if missing, obtain an anonymous token by POSTing to https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token. It also tells the agent to upload user media to the same API and to set session headers derived from metadata and an install-path detection heuristic. These actions are expected for the stated purpose, but they involve network calls and uploading user files (up to 500MB) to a third-party endpoint and may require inspecting install paths/config locations.
✓
Install Mechanism
Instruction-only skill with no install spec or code files. This has minimal local install risk.
ℹ
Credentials
Only NEMO_TOKEN is declared as required (primary credential), plus a config path. That is proportional to a cloud client. However, the skill will create an anonymous NEMO_TOKEN automatically if none is present and may read/write to the declared config location, so the agent will have the ability to obtain and persist credentials for the remote service.
✓
Persistence & Privilege
always is false and the skill does not request elevated platform-wide privileges. It may persist session tokens or config under ~/.config/nemovideo/, which is expected for a client but worth noting.
Assessment
This skill behaves like a cloud media-upload-and-render client: it will upload any audio/images you provide to https://mega-api-prod.nemovideo.ai and use a NEMO_TOKEN (it can obtain an anonymous token for you that expires in ~7 days). Before installing, ensure you trust that domain/service and avoid uploading sensitive or proprietary media. If you prefer control, provide your own NEMO_TOKEN rather than letting the skill auto-generate one, and be aware the skill may store tokens/config under ~/.config/nemovideo/. If you need stronger assurance, ask the publisher for a privacy/security policy or verify the service's legitimacy before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk974hcyv8x3mm7ws8ymx06x40h84jtkg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments