Ai Text To
v1.0.0Turn a 200-word product description into 1080p AI-generated videos just by typing what you need. Whether it's turning written scripts into ready-to-publish v...
⭐ 0· 58·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description claim text→video cloud rendering. The SKILL.md describes only API calls to an external video-rendering backend and an optional anonymous-token flow; requesting a NEMO_TOKEN (and providing a path to obtain one) is proportional to the stated purpose. Minor inconsistency: the registry summary lists no required config paths, but the skill frontmatter declares a configPath (~/.config/nemovideo/) — this could be benign (optional config usage) but is an internal mismatch.
Instruction Scope
Instructions are narrowly scoped to session/token management, SSE streaming, uploads, and export/poll workflows against the nemo API. The runtime asks the agent to read its own frontmatter and detect install path to set an X-Skill-Platform header (reading install path/YAML is reasonable for attribution). It does not instruct reading unrelated system credentials or arbitrary files. Note: it will accept file uploads/paths which means user-supplied media is sent to an external service — consider privacy implications.
Install Mechanism
No install spec or code files; instruction-only skill. This is low-risk from an installation/execution perspective because nothing is downloaded or written by an installer.
Credentials
Only NEMO_TOKEN is declared as required. The SKILL.md can also obtain an anonymous token itself if NEMO_TOKEN is absent (via POST to the service), which is consistent with enabling usage without pre-provisioned credentials. The earlier-mentioned metadata/config-path mismatch (~/.config/nemovideo/) should be clarified: does the skill read/write that path or is it informational?
Persistence & Privilege
Skill is not always-enabled and does not request elevated or persistent system privileges. It retains session tokens for the duration of work but does not instruct modifying other skills or global agent configuration. Autonomous invocation is enabled by default (platform normal) and not by itself concerning here.
Assessment
This skill appears to do what it says: it contacts an external nemo video rendering API to convert text into videos. Before using it, consider: (1) The skill will send any media you upload (and text scripts) to an external service at mega-api-prod.nemovideo.ai — don't send sensitive data. (2) You can provide your own NEMO_TOKEN or let the skill acquire an anonymous token (the skill's instructions include that flow). (3) There is a small metadata mismatch about a config path (~/.config/nemovideo/); ask the author whether the skill will read or write that directory. (4) No code is installed locally, which reduces installer risk, but network calls are required. If you don't trust the external domain or need stronger privacy guarantees, do not provide secrets or upload private media.Like a lobster shell, security has layers — review code before you run it.
latestvk97d1962j0n18zfrbg3tct9kfx84m7sd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN