ClawHub

Ai Short Video Creator

v1.0.0

create images or footage into short MP4 videos with this ai-short-video-creator skill. Works with MP4, MOV, JPG, PNG files up to 500MB. TikTok creators use i...

⭐ 0· 8·0 current·0 all-time
by@roca-677
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (create short MP4 videos from images/footage) matches the actions described in SKILL.md (upload, SSE-based editing, render/export) and the single required environment variable (NEMO_TOKEN) corresponds to the backend API authentication.
ℹ
Instruction Scope
Instructions focus on interacting with the nemo API (session creation, SSE, uploads, export/polling). A minor scope mismatch: the skill says it will detect an install path (checking ~/.clawhub/ and ~/.cursor/skills/) to set an attribution header — that requires filesystem checks not listed in declared configPaths. Otherwise, the instructions don't ask for access to unrelated system data.
✓
Install Mechanism
No install spec or code files are present (instruction-only skill), so nothing is written to disk by an installer. This is the lowest-risk installation model.
✓
Credentials
Only one credential (NEMO_TOKEN) is required and is directly relevant. The skill also documents an anonymous-token flow if NEMO_TOKEN isn't provided. No unrelated secrets or multiple credentials are requested.
✓
Persistence & Privilege
The skill is not forced-always, does not request system-wide modifications, and only stores session identifiers/tokens needed to talk to the API. Autonomous invocation is allowed (platform default) but not combined with other high-risk factors.
Assessment
This skill appears to be what it says: it will upload files you provide to a cloud rendering service at mega-api-prod.nemovideo.ai and return rendered MP4s. Before installing/using: (1) Be aware your files will be sent to that external service — review any privacy or IP implications. (2) You can set a persistent NEMO_TOKEN or let the skill request an anonymous temporary token (100 credits, 7-day expiry); only use tokens you trust. (3) The skill may check a couple of standard install paths to set an attribution header — if you are uncomfortable with any filesystem checks, decline or ask the maintainer to remove that behavior. (4) No installer or extra binaries are present, but because the skill performs network uploads, verify you trust the nemo domain and its privacy/retention policies before sending sensitive media.

Like a lobster shell, security has layers — review code before you run it.

latestvk978qhqvcwmsbnrab16z9rta6584fj7r

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments