ClawHub

Sora 2 Generate

v1.2.1

Generate videos with the NanoPhoto.AI Sora 2 API in text-to-video or image-to-video mode. Use when: (1) User wants to create a Sora 2 video from a prompt, (2...

⭐ 0· 390·0 current·0 all-time
byNanoPhoto.AI@nanophotohq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the code and SKILL.md: the script calls only nanophoto.ai endpoints and the only declared credential (NANOPHOTO_API_KEY) is the API key needed to authenticate those calls.
✓
Instruction Scope
SKILL.md and the bundled Python script stay within the stated scope (submit generation, poll status). The only filesystem access is an optional fallback read of ~/.openclaw/openclaw.json to obtain the same declared API key.
✓
Install Mechanism
No install spec; script is instruction-only and uses Python standard libraries. No downloads, extract operations, or third‑party package installs are present.
ℹ
Credentials
Only NANOPHOTO_API_KEY is required (declared as primary). Minor note: the script will also read ~/.openclaw/openclaw.json as a fallback to retrieve that same key—this is proportionate but does access a user config file in the home directory.
✓
Persistence & Privilege
always is false and the skill does not modify other skills or system-wide settings. Autonomous invocation (model invocation enabled) is the platform default and is not itself a red flag here.
Assessment
This skill appears to do exactly what it says: call the NanoPhoto Sora 2 API. Before installing: (1) provide only the NanoPhoto API key (NANOPHOTO_API_KEY) via the platform's secure env setting rather than pasting it into chat, (2) ensure any image URLs you supply are public and that you have rights to them, (3) be aware the script will optionally read ~/.openclaw/openclaw.json to find the same API key (keep that file secure), and (4) monitor usage/credits on your NanoPhoto account in case of unexpected requests. If you need higher assurance, inspect network logs or run the script in a restricted environment to observe its outbound calls to https://nanophoto.ai.

Like a lobster shell, security has layers — review code before you run it.

generationvk976sm5v2gy54zf5h91emkwrmh83danwimage-to-videovk976sm5v2gy54zf5h91emkwrmh83danwlatestvk97e0ct18kq0ysnmb5tack6hms83en3znanophotovk976sm5v2gy54zf5h91emkwrmh83danwsoravk976sm5v2gy54zf5h91emkwrmh83danwtext-to-videovk976sm5v2gy54zf5h91emkwrmh83danwvideovk976sm5v2gy54zf5h91emkwrmh83danw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvNANOPHOTO_API_KEY
Primary envNANOPHOTO_API_KEY

Comments