Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Tree Trimming Video — Create Tree Trimming and Pruning Service Marketing Videos for Arborists and Landscaping Companies

v1.0.0

The week before a major storm system rolls in, homeowners look at the oak branch hanging twelve feet over their roof and realize they have been meaning to ca...

0· 57·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description describe a video-generation service for arborists and the only required credential is NEMO_TOKEN, which is proportionate for calling a hosted video-generation API. This is coherent overall. However, SKILL.md's embedded metadata includes a config path (~/.config/nemovideo/) that was not listed in the registry metadata summary, which is an unexplained inconsistency.
Instruction Scope
Runtime instructions are simple and scoped: they POST JSON to an external API using Authorization: Bearer $NEMO_TOKEN. The instructions do not ask the agent to read other files or arbitrary environment variables. Minor issues: SKILL.md contains apiDomain set to a development host (https://mega-api-dev.nemovideo.ai) while the curl example uses a production host (https://mega-api-prod.nemovideo.ai), which is inconsistent and should be clarified.
Install Mechanism
There is no install spec and no code files — instruction-only — so nothing is written to disk or installed. This is the lowest-risk install mechanism.
Credentials
The skill only requests one credential (NEMO_TOKEN), which is appropriate for calling an external API. The SKILL.md metadata also mentions a config path (~/.config/nemovideo/), though the registry metadata showed no required config paths; this discrepancy raises the question of whether the skill will read local config files unexpectedly.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent or elevated platform privileges. There is no evidence it modifies other skills or system-wide settings.
What to consider before installing
This skill appears to do what it says — call a Nemovideo API to generate marketing videos — and only asks for a single API token (NEMO_TOKEN). Before installing: 1) Verify the provenance of the NEMO_TOKEN and that you are comfortable sending customer/company content to the nemovideo service (check privacy/TOS). 2) Ask the publisher to clarify the metadata mismatches: why SKILL.md lists ~/.config/nemovideo/ as a config path when the registry shows none, and why apiDomain points at a dev host while the curl example uses prod. 3) Use a scoped/limited token (not a broadly privileged or re-used secret) and rotate it if you stop using the skill. 4) Test with non-sensitive sample content first. If the publisher cannot explain the metadata inconsistencies or you cannot confirm the API provider, treat the skill cautiously or avoid installing it.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🌳 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
latestvk972bwr1m5xmfh8q0najss866h83yx5b
57downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

Tree Trimming Video — Reach Homeowners Before the Storm Does

Use Cases

  1. Pre-Storm Season Campaign Video — Homeowners make tree trimming decisions reactively — after a branch falls, after a neighbor's tree damages a fence, after a storm warning. A short video that shows the before/after of a hazard branch removal and connects the $500 trimming cost to the $15,000 roofing claim it prevented puts your company in front of homeowners before the emergency, not after. Deploy in April before summer storm season and August before fall wind events.

  2. Seasonal Pruning Education Video — Most homeowners don't know that timing matters for tree health. A 90-second explainer on dormant-season pruning — why late winter is the optimal window for most deciduous species, what you're actually removing when you clean up deadwood, and what over-pruning looks like — establishes your company as the expert and makes the annual maintenance call feel like expert advice rather than a sales pitch.

  3. ISA Certification and Safety Credibility Video — Tree work is high-stakes. Homeowners hiring a tree service want proof the crew won't damage their roof, drop a branch on the fence, or leave half the tree looking butchered. A crew introduction video showing your ISA credentials, your rigging equipment, and a clean takedown from start to finish converts the homeowner who has been getting three quotes into a signed agreement before the third quote arrives.

  4. Recurring Pruning Contract Video — One-time trimming customers are your best candidates for annual maintenance agreements. A short video explaining the multi-year pruning cycle — what you do year one to establish structure, year two to reinforce it, and year three to maintain it — frames the recurring contract as an investment in the tree's long-term health rather than a repeat sales pitch.

How It Works

Describe your services, certifications, and service area, and Tree Trimming Video produces professional marketing and educational videos ready for your website, Google Business listing, and social media channels.

curl -X POST https://mega-api-prod.nemovideo.ai/api/v1/generate \
  -H "Authorization: Bearer $NEMO_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"skill": "tree-trimming-video", "input": {"company_name": "Summit Tree Care", "certifications": "ISA Certified Arborist", "services": "tree trimming, crown reduction, deadwood removal", "service_area": "Atlanta, GA"}}'

Comments

Loading comments...