ClawHub

Free Video Generator Open Source

v1.0.0

Turn five product images and a background music file into 1080p ready-to-share videos just by typing what you need. Whether it's generating videos from image...

⭐ 0· 13·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (cloud video generator) align with the declared requirement for a NEMO_TOKEN and the described API endpoints; requiring a service token and a nemovideo config path is reasonable for this purpose. Note: the top-level registry metadata said no required config paths while the SKILL.md frontmatter lists ~/.config/nemovideo/ (minor metadata inconsistency).
ℹ
Instruction Scope
Instructions explicitly tell the agent to POST media and control messages to https://mega-api-prod.nemovideo.ai, create sessions, read the skill's YAML frontmatter, and detect install path for an attribution header. These actions are expected for a remote-rendering service, but they do transmit user-uploaded images/audio to a third party and can automatically obtain an anonymous token if NEMO_TOKEN is absent—users should be aware of that data flow.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written by an installer. This is the lowest install risk.
✓
Credentials
Only NEMO_TOKEN is required (declared as primary). That is proportional to a cloud API client. The SKILL.md also references a config path (~/.config/nemovideo/) which can be justified to read/store token, but note the registry metadata earlier omitted this path (inconsistency).
✓
Persistence & Privilege
No always:true, no installs, and the skill does not request elevated or persistent system privileges. It can invoke network calls (expected). Autonomous model invocation is allowed by default but is not by itself concerning here.
Assessment
This skill will upload any images or audio you provide to a third-party backend (mega-api-prod.nemovideo.ai) and uses a service token (NEMO_TOKEN). If you don't supply a token it will request an anonymous token from that backend on your behalf (100 free credits, 7-day expiry). Before using: (1) Don’t upload sensitive/personal data unless you trust the service; (2) Prefer supplying your own NEMO_TOKEN if you want control over the account; (3) Be aware the skill may read or use ~/.config/nemovideo/ if present; (4) Confirm you trust the endpoint and check its privacy/terms since media and metadata will be transmitted. The skill is internally coherent and instruction-only (no installer), but verify service provenance because source/homepage are not provided.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c5vnnt19tj5fw6n3fg6v84h84sr20

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments