ClawHub

Anniversary Video Maker

v1.0.3

The most common use for anniversary-video-maker is assembling a slideshow of couple photos, wedding clips, and milestone moments into a polished video with m...

⭐ 0· 106·0 current·0 all-time
by@nemovideonemo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill is a cloud-backed video renderer and requests a single service token (NEMO_TOKEN) which is appropriate for that purpose. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata said no required config paths — this is likely benign but is an internal mismatch.
ℹ
Instruction Scope
Instructions direct the agent to obtain or use a NEMO_TOKEN, create a session, upload files/URLs, and poll render jobs on https://mega-api-prod.nemovideo.ai. The SKILL.md also instructs the agent to read the file's YAML frontmatter at runtime to set X-Skill-* headers and to detect install paths (~/.clawhub/, ~/.cursor/skills/) — reading its own frontmatter and checking install paths is plausible for attribution but does imply the agent will read files on disk.
✓
Install Mechanism
No install spec and no code files — this is an instruction-only skill and does not perform downloads or install artifacts on disk, which minimizes install-time risk.
ℹ
Credentials
Only one credential is declared (NEMO_TOKEN), which is proportionate for a cloud API. However the frontmatter references a config path (~/.config/nemovideo/) that is not declared elsewhere; that could be used to persist or read tokens/configs and should be clarified. The skill also instructs generating an anonymous token via the service API if no token exists (this is expected for anonymous access).
✓
Persistence & Privilege
always:false and normal autonomous invocation are used. The skill does not request elevated platform-wide presence or modify other skills. It may persist session IDs/tokens for its own session management (expected for a cloud service).
Assessment
This skill appears to be what it says: a cloud-based anniversary video renderer that needs a single service token. Before installing or using it, confirm you trust the endpoint (mega-api-prod.nemovideo.ai) and its privacy/retention policy because you will be uploading personal photos and clips. Prefer using the anonymous token flow or a short-lived token rather than placing a permanent NEMO_TOKEN in your global environment. Ask the publisher (or your admin) to clarify the ~./config/nemovideo/ reference and whether tokens or session data will be written there. If you have sensitive images, test with non-sensitive content first and verify how long uploads are retained and whether exported videos are private or publicly accessible.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bvpye378gv7jzhpr82xeaed84ejfx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💍 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments