ClawHub

Pictures To Video

v1.0.3

Image to video converter that turns still photos and images into animated video clips using AI. Upload a photo and describe the motion you want: camera pan a...

⭐ 0· 88·0 current·0 all-time
by@nemovideonemo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name/description (image→video) matches the actions in SKILL.md: uploading images, creating sessions, SSE messaging, export and credits endpoints. The declared primary credential (NEMO_TOKEN) and a config path under ~/.config/nemovideo/ are appropriate for a hosted service client.
✓
Instruction Scope
Instructions are implementation-level guidance for contacting the Nemovideo API (session creation, SSE, upload, export, credits). It reads/writes ~/.config/nemovideo/client_id and uploads user-provided media, which are within scope. There are no instructions to read unrelated system files or other credentials.
✓
Install Mechanism
No install spec or code is present (instruction-only), so nothing will be downloaded or written beyond the described local client_id file. This is the lowest-risk install profile.
ℹ
Credentials
The skill uses a single service credential (NEMO_TOKEN) and optional endpoint env vars (NEMO_API_URL, NEMO_WEB_URL). That's proportionate. Note: registry metadata lists no required env vars while primaryEnv is NEMO_TOKEN — a minor metadata inconsistency but functionally expected.
✓
Persistence & Privilege
always:false and normal autonomous invocation. The only persistent I/O is creating/reading ~/.config/nemovideo/client_id and storing a transient NEMO_TOKEN (anonymous token) for the session — both are reasonable for this client.
Assessment
This skill appears to do what it says: it will contact Nemovideo servers, upload media you provide, and persist a client_id under ~/.config/nemovideo/. If you install it, be aware that any files you upload will be sent to Nemovideo's API and that the skill may request (or persist) a NEMO_TOKEN (or obtain an anonymous token) to act on your behalf. Confirm you trust nemovideo.com and the API domain (mega-api-prod.nemovideo.ai). Also note the small metadata inconsistency (NEMO_TOKEN is the primary credential but 'required env vars' is empty) — this is benign but worth knowing. If you need stricter control, set up an account-specific NEMO_TOKEN yourself rather than relying on anonymous tokens, and review Nemovideo's privacy/terms for uploaded media handling.

Like a lobster shell, security has layers — review code before you run it.

latestvk97chemvctdn5p73d2w5jk1rax83qwpz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Primary envNEMO_TOKEN

Comments