ClawHub

Text To Video Length

v1.0.0

convert text prompt into generated video clips with this skill. Works with TXT, DOCX, PDF, SRT files up to 500MB. marketers use it for converting written scr...

⭐ 0· 24·0 current·0 all-time
by@nemovideonemo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill claims to convert text into videos and only requires a single service credential (NEMO_TOKEN), which matches the described cloud API usage. However, SKILL.md's internal metadata lists a config path (~/.config/nemovideo/) while the registry metadata earlier stated no required config paths — this is an inconsistency worth clarifying.
ℹ
Instruction Scope
Runtime instructions are focused on the video API (session creation, SSE, uploads, renders). They also instruct the agent to auto-obtain an anonymous token if NEMO_TOKEN is missing and to detect the 'install path' (checking ~/.clawhub/ and ~/.cursor/skills/) to populate an X-Skill-Platform header. That implies inspecting the user's home filesystem and persisting session state, which is reasonable for attribution but expands scope beyond purely processing content.
✓
Install Mechanism
Instruction-only skill with no install spec and no downloadable code — lowest-risk install surface.
ℹ
Credentials
The only declared credential is NEMO_TOKEN which is appropriate for calling the provider API. Two small inconsistencies: the registry lists NEMO_TOKEN as required but SKILL.md describes obtaining an anonymous token automatically if it's not present; and SKILL.md also references a config path for storing session/token state that wasn't declared in the registry metadata.
✓
Persistence & Privilege
The skill is not force-enabled (always:false) and does not request broad system privileges. It does instruct storing a session_id (and using tokens) and to create an anonymous token if needed — normal for a remote service integration, but you should confirm where tokens/session data will be stored.
Assessment
This skill appears to be what it says: a wrapper for a cloud text→video API. Before installing or enabling it, consider: 1) Confirm the backend domain (mega-api-prod.nemovideo.ai) is trustworthy for your data — uploads can be up to 500MB and may contain sensitive content. 2) Ask how/where the skill will store session tokens (SKILL.md references ~/.config/nemovideo/); decide whether you are comfortable with a config directory under your home directory. 3) Note the skill will auto-request an anonymous token if NEMO_TOKEN is not set — if you prefer explicit control of credentials, set NEMO_TOKEN yourself or decline anonymous provisioning. 4) The instructions suggest inspecting install paths (~/.clawhub/, ~/.cursor/skills/) to set an X-Skill-Platform header — if you want to prevent filesystem probes, ask whether the skill can default to 'unknown' instead. 5) If you need stronger assurance, request the publisher/owner info or a homepage and review the service's privacy/retention policy for uploaded media and generated tokens.

Like a lobster shell, security has layers — review code before you run it.

latestvk977x88yrqpyjs466vf63cerex84xff3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⏱️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments