Ai Video Generator Free Mobile
v1.0.0generate images or clips into ready-to-share videos with this skill. Works with MP4, MOV, JPG, PNG files up to 200MB. TikTok creators use it for generating s...
⭐ 0· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (video generation from images/clips) matches the declared credential (NEMO_TOKEN) and the SKILL.md only describes network calls to a single rendering backend (mega-api-prod.nemovideo.ai). Asking for a service token is proportionate for this purpose.
Instruction Scope
Instructions stay within video-generation scope (session creation, uploads, SSE-based editing, export polling). They do instruct automatic anonymous token acquisition if NEMO_TOKEN is missing and to store session_id for subsequent calls. The skill also instructs detecting the install path (~/.clawhub/, ~/.cursor/skills/) to set an attribution header, which implies checking local paths; this is reasonable for header population but is a side effect worth noting. The SKILL.md is truncated in places; full text should be reviewed.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest install risk. No downloads or third-party packages are requested.
Credentials
Only one env var (NEMO_TOKEN) is declared and used, which aligns with the service. Minor inconsistency: the skill provides an anonymous-token acquisition flow (so NEMO_TOKEN is optional) but still lists NEMO_TOKEN as the primary credential; metadata also mentions a config path (~/.config/nemovideo/) although the registry summary earlier lists no required config paths. These are small mismatches but not high risk.
Persistence & Privilege
The skill does not request always:true or system-wide changes. It asks to store a session_id for the session lifecycle (normal). It does not request persistent elevated privileges or modify other skills' configs.
Assessment
This skill will upload your files and interact with a remote service (mega-api-prod.nemovideo.ai) using a service token. Consider whether the media you upload contains sensitive information before using it. Note it will obtain an anonymous token automatically if you don't provide NEMO_TOKEN and will store a session_id for the session; tokens are short-lived (the doc says 7 days for anonymous tokens). Verify the backend domain and privacy policy if you care about data retention. Also be aware of minor metadata inconsistencies (declared config path in SKILL.md metadata vs registry summary); you may want to inspect the full SKILL.md (the provided copy is partially truncated) and confirm where session state is stored and for how long before installing.Like a lobster shell, security has layers — review code before you run it.
latestvk9716wbprb8ptb9z4mjbmy375h84vybr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📱 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
