Facebook Photo Video Maker
v1.0.0Cloud-based facebook-photo-video-maker tool that handles turning photo albums into shareable Facebook videos. Upload JPG, PNG, HEIC, WebP files (up to 200MB)...
⭐ 0· 63·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (cloud video creation from photos) matches the actions requested: network calls to a rendering API, file uploads, session management, and an API token (NEMO_TOKEN). There are no unrelated binaries or unrelated cloud credentials requested.
Instruction Scope
SKILL.md gives concrete API calls (session creation, SSE, upload, export) and instructs generating an anonymous token if NEMO_TOKEN is missing — all within the stated purpose. One minor note: it asks that X-Skill-Platform be auto-detected from the install path, which could require the agent/runtime to inspect its install location; that is plausible for attribution but is outside the core media-processing functionality and worth confirming with your agent runtime.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk installation footprint (nothing is downloaded or written by this package itself).
Credentials
Only a single environment credential is declared (NEMO_TOKEN) and the SKILL.md provides an anonymous-token fallback flow, which is proportionate. The frontmatter includes a config path (~/.config/nemovideo/) — the runtime may read/write session state there; this is reasonable for session persistence but users should be aware the skill expects to store session info locally.
Persistence & Privilege
The skill is not always-enabled and does not request elevated or cross-skill configuration changes. It can be invoked autonomously (the platform default), which is expected for skills that call remote services.
Assessment
This skill appears to do what it says, but before installing: (1) Confirm you trust the API host (mega-api-prod.nemovideo.ai) because your images and session tokens will be uploaded there; (2) Understand that uploaded files can contain sensitive data — avoid sending private images if you don't want them stored/processed off-device; (3) If you prefer, set NEMO_TOKEN yourself (instead of using the anonymous flow) and treat it like a secret; (4) Expect the skill to read/write a config directory (~/.config/nemovideo/) for session state; (5) If you want more assurance, ask the publisher for a privacy/data-retention policy or a canonical homepage/source before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk970238v6h789h96wc70z91h6184n8cn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📸 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN