Restaurant Video Maker
v1.0.6Restaurant Video Maker — Create Restaurant Promos and Food Review Videos. Works by connecting to the NemoVideo AI backend. Supports MP4, MOV, AVI, WebM, and...
⭐ 0· 113·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (creating restaurant promo and review videos via NemoVideo) match the single required credential NEMO_TOKEN and the declared apiDomain. Asking for a service token is proportionate for an API-backed video generation skill.
Instruction Scope
SKILL.md is instruction-only and the examples/prompt templates are appropriate for the stated purpose. However the file metadata and description mention "automatic credential setup on first use" and a config path (~/.config/nemovideo/), but the registry summary earlier said there were no required config paths — it's unclear how credentials are obtained/stored and whether the agent will read/write files in the user's home directory. The visible instructions do not request unrelated system files, but the credential setup mechanism is not documented here.
Install Mechanism
No install spec and no code files — nothing is downloaded or written by an installer. As an instruction-only skill this is low-risk from an installation perspective.
Credentials
Only one required environment variable (NEMO_TOKEN) is declared and it is the primary credential for the external NemoVideo service — this is proportional for a backend API client. No unrelated secrets or multiple credentials are requested.
Persistence & Privilege
The skill is not force-enabled (always:false) and can be invoked normally. The SKILL.md references a config path (~/.config/nemovideo/) and "automatic credential setup," which implies it may write to the user's config directory to store credentials — that behavior is expected for a client but should be confirmed (what exactly is written, and with what filesystem scope/permissions).
Assessment
This skill appears to do what it says and only asks for a NemoVideo API token. Before installing: 1) Confirm how the "automatic credential setup" works — will it open a browser, accept a pasted token, or write files to ~/.config/nemovideo/? 2) Inspect the privacy/security documentation at the homepage/repository (https://nemovideo.com and the GitHub repo) and verify token scopes and retention policies. 3) If you supply NEMO_TOKEN, prefer a token with the minimum scopes needed and be prepared to revoke it if you see unexpected requests. 4) If you are uncomfortable with the skill writing to your home config directory, ask for clarification or run it in an isolated environment. If you want, provide the full SKILL.md (complete file) or the repo link and I can re-check the credential flow and any file-write instructions in detail.Like a lobster shell, security has layers — review code before you run it.
latestvk977hgjpbvm2sdttz8x5qf1pxs83xy12
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🍽️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN