ClawHub

Video Generator Image Free

v1.0.0

Turn three product photos or landscape shots into 1080p animated video clips just by typing what you need. Whether it's converting still images into shareabl...

⭐ 0· 49·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The name/description match the actions in SKILL.md: session creation, upload, SSE-based generation, and export endpoints at mega-api-prod.nemovideo.ai. The single required env var (NEMO_TOKEN) is appropriate. Minor inconsistency: the registry summary said 'Required config paths: none' while the skill frontmatter declares a config path (~/.config/nemovideo/). This is likely metadata drift but should be checked.
✓
Instruction Scope
SKILL.md instructs the agent to read NEMO_TOKEN (or fetch an anonymous token), create sessions, upload files (multipart or by URL), stream SSE messages, poll render status, and return download URLs. Those instructions are limited to the video service and user-provided files; there are no instructions to read unrelated system files or other environment variables.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — the lowest-risk install model. Nothing is downloaded or written by an installer.
ℹ
Credentials
Only NEMO_TOKEN is required (declared as primaryEnv), which is proportional to calling the remote API. The frontmatter also references a config path (~/.config/nemovideo/) that could imply reading local config; this is not reflected in the registry summary and should be clarified. No other credentials or broad system access are requested.
✓
Persistence & Privilege
always:false (no forced permanent inclusion). The skill may be invoked autonomously (disable-model-invocation:false) which is normal for skills; it does not request elevated system privileges or modify other skills' configs.
Assessment
This skill appears to do what it says: it uses a NEMO_TOKEN to call a remote Nemo video API and uploads the images you provide to produce rendered MP4s. Before installing: 1) Understand that your images will be uploaded to an external service (privacy risk for sensitive images). 2) Confirm you are comfortable giving the skill access to a NEMO_TOKEN (or allowing it to fetch an anonymous token). 3) Ask the publisher to clarify the config-path mention (~/.config/nemovideo/) vs. registry metadata — ensure the skill won't read unexpected local files. 4) Because this is instruction-only there is no code to audit; if you need stronger guarantees, request an official homepage, privacy policy, or publisher identity before use. Finally, avoid uploading sensitive personal data and prefer ephemeral tokens with minimal scope where possible.

Like a lobster shell, security has layers — review code before you run it.

latestvk979mqepfyg4b7bdckz0zgkm4584s1zz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments