ClawHub

Gym Promotional Video — Create Gym Membership and Fitness Studio Promotional Videos for Member Acquisition

v1.0.0

Your gym has new equipment, a renovated locker room, four certified trainers, and a January membership special that nobody outside your existing members know...

⭐ 0· 37·0 current·0 all-time
by@nemovideonemo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill name/description describe creating promotional videos and the SKILL.md shows a single API call to a NemoVideo endpoint using NEMO_TOKEN — this is coherent. Minor mismatch: the registry summary lists no required config paths, but the SKILL.md metadata includes a configPaths entry (~/.config/nemovideo/). That inconsistency should be clarified (likely an author oversight).
✓
Instruction Scope
Runtime instructions are narrow: upload footage URLs and post a JSON payload to https://mega-api-prod.nemovideo.ai/api/v1/generate with an Authorization: Bearer $NEMO_TOKEN header. The instructions do not direct the agent to read unrelated files, other env vars, or post data to additional endpoints.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This is the lowest-risk install pattern because nothing is written to disk by the skill itself.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is required, which is appropriate for an API-backed video service. Verify token scope and privileges before handing it over. Also confirm whether the declared config path in SKILL.md (~/.config/nemovideo/) is actually required — the registry listing showed no config paths.
✓
Persistence & Privilege
The skill is not force-included (always: false), has no install, and does not request elevated system presence. Note that autonomous invocation is allowed by default (disable-model-invocation: false); this is normal but you should be comfortable with the agent being able to call the skill when permitted.
Assessment
This skill appears to do what it says: call NemoVideo's API to generate promotional videos and it only asks for a single API token. Before installing: 1) Confirm the NEMO_TOKEN you supply is scoped only to the NemoVideo service and does not grant broader access (e.g., to other cloud accounts). 2) Verify the API domain (mega-api-prod.nemovideo.ai) is the legitimate endpoint for the vendor and that you trust the service's privacy/retention policy for uploaded footage. 3) Clarify the config path discrepancy in the SKILL.md metadata (~/.config/nemovideo/) — ensure the skill will not read local files you don't intend to share. 4) Be mindful that uploaded footage may include personal data; confirm you have rights/consent to share it. If any of these checks fail or the token scope is unclear, do not install or provide credentials.

Like a lobster shell, security has layers — review code before you run it.

latestvk974g8tcaedzjve19hy37dhxwd8405fh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🏋️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments