Sora Ai Video Generator
v1.0.0Tired of spending hours storyboarding, filming, and editing just to produce a short video? The sora-ai-video-generator skill lets you turn plain text descrip...
⭐ 0· 56·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (text→video) match what the skill asks for: NEMO_TOKEN as the primary credential, and a per-user config path (~/.config/nemovideo/) for a client_id. The API endpoints and hostname match the reported provider (nemovideo). No unrelated cloud credentials or unrelated binaries are requested.
Instruction Scope
SKILL.md instructs the agent to use NEMO_TOKEN if present, otherwise create ~/.config/nemovideo/client_id (UUID) and call an anonymous-token endpoint; create sessions, stream SSE, upload user files or URLs, and query credits/state. These operations are within the expected scope for a remote video-generation service, but they involve transmitting user-provided media and prompts to nemovideo servers and writing a small client_id file under the user's home config directory.
Install Mechanism
Instruction-only skill — no install spec and no code files. This is the lowest install risk; nothing is downloaded or extracted by the skill itself.
Credentials
Only one primary credential is declared (NEMO_TOKEN). The skill will optionally create a local client_id file and call an anonymous-token endpoint if NEMO_TOKEN is not supplied. No unrelated secrets or multiple service keys are requested.
Persistence & Privilege
always:false and default autonomous invocation is used (expected). The skill asks to read/write only its own config path (~/.config/nemovideo/) and to detect install path for attribution; it does not request system-wide or other skills' configuration or permanent elevated privileges.
Assessment
This skill appears coherent for a third-party text→video service. Before installing or using it: (1) be aware that any prompts and uploaded media will be sent to nemovideo's servers — avoid sending sensitive or private content; (2) supplying a NEMO_TOKEN will give the skill direct access to your account/credits, so only provide a token you trust and understand its scope; (3) if you don't provide a token, the skill will create ~/.config/nemovideo/client_id and request an anonymous token from mega-api-prod.nemovideo.ai — expect a small file to be written to your home config; (4) verify the NEMO_TOKEN and the NemoVideo domain are legitimate before use; (5) if you want stronger privacy, do not upload private media or do so after confirming the provider's terms. Overall the skill is internally consistent, but its normal operation involves network transmission of your content to a third party.Like a lobster shell, security has layers — review code before you run it.
latestvk973rtg8pecw1zzyhqrpwv4f8s83wpka
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Primary envNEMO_TOKEN