Tiktok Viral Slideshow
v1.0.0TikTok creators create images or clips into vertical slideshow video using this skill. Accepts JPG, PNG, MP4, MOV up to 200MB, renders on cloud GPUs at 1080p...
⭐ 0· 21·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (render TikTok-ready slideshows) aligns with the actions it describes (upload, render, export). However the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) while the registry metadata above lists no required config paths — this metadata mismatch is inconsistent and worth clarifying.
Instruction Scope
Instructions are focused on the rendering workflow (session creation, SSE, upload, export). They also instruct the agent to: (1) check for NEMO_TOKEN and, if absent, request an anonymous token from an external API, and (2) inspect install paths to set an attribution header. Both behaviors are plausible for this purpose but expand scope beyond simple upload/render: the skill will contact external endpoints and read some local paths.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write or install binaries on disk — lowest install risk.
Credentials
Only one credential is required (NEMO_TOKEN), which is appropriate for a cloud API. But the instructions also reference a local config path (~/.config/nemovideo/) and will attempt to obtain an anonymous token from mega-api-prod.nemovideo.ai if NEMO_TOKEN is missing — the extra config-path reference was not declared in the registry summary and should be reconciled.
Persistence & Privilege
The skill is not always-on and does not request elevated or persistent platform privileges. It keeps session_id and tokens for operation (normal for a session-based cloud service) but does not declare any cross-skill/system-wide modifications.
Assessment
This skill appears to do what it says: it uploads user-supplied images/videos to an external rendering service (mega-api-prod.nemovideo.ai) and returns MP4s. Before installing, consider: (1) privacy — your media files will be uploaded to an external service; (2) anonymous token behavior — the skill can obtain a short-lived anonymous NEMO_TOKEN automatically if none is provided (it will call an external endpoint and use that token for rendering); (3) metadata mismatch — the SKILL.md references a local config path (~/.config/nemovideo/) that the registry summary did not list; ask the publisher what that path is used for and whether anything is written there; (4) provenance — the skill has no homepage or published source, so you can't audit the backend or operator. If you need stronger assurance, request the publisher's source or a privacy policy and confirm where uploaded files and tokens are stored/retained.Like a lobster shell, security has layers — review code before you run it.
latestvk97avvd899ms0jtapk62mrdgk184kvph
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN