Ai Video Slideshow Maker
v1.0.1Create stunning photo and video slideshows with music using AI — transform photo collections into cinematic video stories with Ken Burns motion effects, beat...
⭐ 0· 66·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (AI slideshow creation) aligns with the declared primary credential (NEMO_TOKEN) and the homepage/repository metadata for NemoVideo. Requesting a service token and a nemo config path is expected for a cloud-based slideshow API.
Instruction Scope
This is an instruction-only skill (no code files). The provided SKILL.md is long and mostly product copy; it likely requires uploading user photos and metadata to the Nemo service and reading/storing a token in ~/.config/nemovideo/. I could not review the entire runtime instruction set (content was truncated), so I cannot fully verify whether the instructions ask the agent to read other unrelated files or environment variables.
Install Mechanism
No install specification and no code files — the skill is instruction-only and will not write binaries or archives to disk as part of installation, which is lower risk.
Credentials
The skill declares a primary credential NEMO_TOKEN (appropriate for an external Nemo API). However, the metadata's 'requires.env' list is empty while primaryEnv is set — this minor inconsistency should be fixed. No other unrelated secrets or credentials are requested, which is proportional to the stated purpose.
Persistence & Privilege
always is false and autonomous invocation is allowed (the platform default). The skill does declare a user config path (~/.config/nemovideo/) which is reasonable for storing the token; it does not request elevated or system-wide privileges.
Assessment
This skill is coherent with its purpose, but before installing: 1) Confirm NEMO_TOKEN is only for NemoVideo and that you trust nemovideo.com; tokens grant the service ability to process and store your uploads. 2) Expect the skill to upload your photos (and potentially EXIF/metadata) to Nemo's servers — do not upload sensitive or private images unless you accept that. 3) Verify where the SKILL.md stores or reads the token (it references ~/.config/nemovideo/) and whether the agent will persist the token. 4) Ask the publisher to fix the small metadata mismatch (primaryEnv set but requires.env empty) and to provide the full runtime instructions so you can confirm the skill does not read or exfiltrate unrelated local files. If you need high assurance about privacy of images, review NemoVideo's privacy policy or avoid uploading sensitive content.Like a lobster shell, security has layers — review code before you run it.
latestvk9717mkgpeq8dgjxeh0wym27m983v39a
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Primary envNEMO_TOKEN