ClawHub

Video Generator In Free

v1.0.0

generate text or images into ready-to-share videos with this skill. Works with MP4, MOV, JPG, PNG files up to 200MB. content creators use it for generating s...

⭐ 0· 20·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill claims to call a remote video-rendering API and the only required secret is NEMO_TOKEN, which is appropriate for authenticating to that service. Declared API endpoints and flows match the described video-generation purpose.
ℹ
Instruction Scope
Instructions stay focused on session creation, SSE messaging, uploads, status checks, and export polling against the nemovideo API. They do instruct the agent to read this file's YAML frontmatter for attribution and to detect install path (~/.clawhub, ~/.cursor/skills/) to set an X-Skill-Platform header; this requires filesystem access but is limited and explained in the doc. No instructions request unrelated system files, other service credentials, or external endpoints beyond the nemovideo API.
✓
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, which is the lowest-risk install mechanism.
ℹ
Credentials
Only NEMO_TOKEN is required (declared as primaryEnv), which is proportionate for the described API. There is a small inconsistency: the registry metadata summary showed no required config paths, but the SKILL.md frontmatter lists a configPaths value (~/.config/nemovideo/) — this is likely benign but worth noting because it suggests the skill may attempt to read that config directory if present.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system-wide privileges. Autonomous invocation is allowed (platform default) but not combined with other alarming privileges.
Assessment
This skill appears to do what it says: it talks to the nemovideo API and requires a single service token (NEMO_TOKEN). Before installing: (1) confirm you are comfortable providing a NEMO_TOKEN environment variable (it will be used as a bearer token for all API calls), (2) avoid putting unrelated secrets into NEMO_TOKEN, (3) be aware the skill will upload any files you send to the nemovideo endpoints (don’t upload sensitive private data), and (4) note the minor metadata mismatch: SKILL.md references a config path (~/.config/nemovideo/) and checks install paths for attribution headers — this is likely for telemetry/headers only but you may want to review or sandbox the skill if you’re concerned about filesystem reads. If you need stronger assurance, ask the author for a clear statement that only the nemovideo domain is contacted and for details on what (if anything) is read from ~/.config/nemovideo/.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ecy9ypgd7qdvzj1xzz5687984rg4m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments