ClawHub

For Beginners Photo Video Maker

v1.0.0

turn photos and images into polished slideshow videos with this for-beginners-photo-video-maker skill. Works with JPG, PNG, HEIC, WebP files up to 200MB. beg...

⭐ 0· 61·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is a cloud-based photo-to-video renderer and it asks only for a service token (NEMO_TOKEN) and uses the nemovideo.ai API endpoints it documents. Requiring an API token is appropriate for this purpose. Minor inconsistency: the SKILL.md frontmatter references a config path (~/.config/nemovideo/) for storing state but the registry metadata earlier listed no required config paths.
✓
Instruction Scope
SKILL.md instructs the agent to upload images, open sessions, use SSE for edits, poll export status, and include the bearer token on requests — all consistent with the stated video-rendering purpose. It also instructs the agent to auto-request an anonymous token if none is present and to avoid showing raw token values to users. These actions involve sending user images and metadata to the external API (mega-api-prod.nemovideo.ai), which is expected but important for privacy.
✓
Install Mechanism
This is an instruction-only skill with no install spec or code to download, so there is no installation-time code execution or archive extraction risk.
ℹ
Credentials
Only one credential (NEMO_TOKEN) is requested, which matches the integration. The skill also documents an optional config path for session/token storage; the registry metadata does not list that path, which is an inconsistency to be aware of. The runtime instructions will generate and persist an anonymous token when none is supplied — you should confirm where that token will be stored (agent storage, environment, or ~/.config/nemovideo/) before proceeding.
✓
Persistence & Privilege
always:false and normal autonomous invocation are set. The skill may persist a session/token for up to 7 days (per API behavior) but it does not request elevated system-wide privileges or claim permanent presence.
Assessment
This skill is coherent for a cloud photo→video service, but before installing: (1) confirm you are comfortable uploading your photos to https://mega-api-prod.nemovideo.ai and review that service's privacy/terms, (2) decide whether to supply your own NEMO_TOKEN or allow the skill to auto-create an anonymous token (auto-generated tokens carry 100 credits and are valid ~7 days), (3) ask where the token/session will be stored (the SKILL.md mentions ~/.config/nemovideo/ but registry metadata omitted it), and (4) if you need stricter control, provide your own token and verify the skill does not persist secrets to unexpected locations. The metadata inconsistency is not a functional red flag but is worth verifying with the skill author or registry before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9712vsnagp79smms43gb3cqr184mqpq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments