ClawHub

Image Video Ai

v1.0.0

marketers convert images into animated video clips using this skill. Accepts JPG, PNG, WEBP, GIF up to 200MB, renders on cloud GPUs at 1080p, and returns MP4...

⭐ 0· 63·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is described as a cloud video-rendering tool and its instructions exclusively call a nemo video API and require a NEMO_TOKEN; that credential and the described API endpoints align with the stated purpose.
ℹ
Instruction Scope
Runtime instructions direct the agent to upload user images and interactive messages to https://mega-api-prod.nemovideo.ai, create or reuse an anonymous token, open sessions, read SSE, poll render status, and return download URLs — all expected for this service. This means user image data and metadata will be transmitted to an external cloud service (expected but privacy-relevant). The SKILL.md also requires adding attribution headers and auto-detecting an 'install path' for X-Skill-Platform, which may be ill-defined in some agent contexts.
✓
Install Mechanism
There is no install spec or packaged code — instruction-only skill. This is lower-risk because nothing is downloaded or written by an installer.
ℹ
Credentials
Only one credential is declared (NEMO_TOKEN), which matches the API usage. However, the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata reported no required config paths — this inconsistency should be clarified. The anonymous-token flow (POST to the service to get a temporary token) is reasonable but means the agent will perform network auth on first use if no token is supplied.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and only instructs saving its own session_id. It can invoke autonomously (normal default) but it does not request elevated or persistent platform privileges.
Assessment
This skill appears to be what it says: a cloud-based image→video converter that uploads images to nemovideo.ai and returns MP4s. Before installing, consider: (1) Privacy — your images will be sent to an external service; avoid uploading sensitive images. (2) Credentials — provide either a temporary/anonymous token or a service token (NEMO_TOKEN); don't reuse sensitive long-lived keys. (3) Metadata inconsistency — the SKILL.md mentions a local config path (~/.config/nemovideo/) not shown in registry metadata; ask the publisher whether the agent will read or write that directory. (4) Source & trust — the skill has no homepage and an unknown source; verify the provider (mega-api-prod.nemovideo.ai) and its terms/privacy before use. If you need stronger assurance, ask the author to (a) publish a homepage/source repo, (b) remove or explicitly justify use of any local config paths, and (c) document privacy/retention policy for uploaded media.

Like a lobster shell, security has layers — review code before you run it.

latestvk970a3x1k312sqk9sdjcb7mx0h84jdj3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments