Video Maker Free Ai Tool
v1.0.0Turn three product photos and a logo file into 1080p finished MP4 videos just by typing what you need. Whether it's generating polished videos from images or...
⭐ 0· 35·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (server-side video rendering from uploaded images/clips) match the declared runtime requirements: a single service token (NEMO_TOKEN) and calls to a remote API at mega-api-prod.nemovideo.ai. Nothing in the SKILL.md asks for unrelated cloud credentials or system-wide access that would be inconsistent with a cloud video service.
Instruction Scope
Instructions stay within the video service domain: obtain/use a NEMO_TOKEN, create a session, upload files, stream SSE, start renders, poll status, and return download URLs. The SKILL.md instructs the agent to detect install path to set X-Skill-Platform (reads ~/.clawhub/ and ~/.cursor/skills/ presence) — this requires limited filesystem probing and is not strictly necessary for core functionality. SKILL.md also instructs storing session_id and token for subsequent calls and to avoid showing raw tokens to the user.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written at install time by the skill itself. This is the lowest-risk install model.
Credentials
The skill requests a single environment credential (NEMO_TOKEN), which is proportional to a cloud rendering service. However, the SKILL.md YAML metadata lists a config path (~/.config/nemovideo/) whereas the registry metadata showed no required config paths — this mismatch is inconsistent and should be clarified. The skill also may probe common install paths to set a platform header, which could expose information about where skills are installed.
Persistence & Privilege
The skill is not always-enabled and runs only when invoked. It does instruct storing a session_id and token for the session, which is normal for a remote service client. It does not request system-wide configuration changes or other skills' credentials.
Assessment
This skill is broadly coherent for a cloud video-rendering helper: it needs a single service token (NEMO_TOKEN), will contact mega-api-prod.nemovideo.ai to get an anonymous token if none is provided, create sessions, upload files, and return download URLs. Before installing, verify you trust the external domain (mega-api-prod.nemovideo.ai) and that you're comfortable the skill may obtain and store an anonymous token for up to 7 days. Ask the author to clarify the config-path discrepancy (SKILL.md mentions ~/.config/nemovideo/ but registry metadata lists none). If you prefer stricter privacy, supply your own NEMO_TOKEN rather than letting the skill request an anonymous token, and avoid running the skill if you do not want the agent to probe install paths (it checks ~/.clawhub/ and ~/.cursor/skills/ to set a header). Finally, since the skill has no provenance (unknown source/homepage), consider running it in a controlled environment or asking the publisher for more information before broad deployment.Like a lobster shell, security has layers — review code before you run it.
latestvk978g74q00bwdtebqyxfz66x3h84tpqg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN