ClawHub

Motion Video

v1.0.0

Cloud-based motion-video tool that handles turning still images into animated motion videos for social media. Upload JPG, PNG, WEBP, MP4 files (up to 200MB),...

⭐ 0· 21·0 current·0 all-time
by@roca-677
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description match the actions in SKILL.md: session creation, upload, SSE editing, and export flows to a nemovideo API. One minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata for the skill showed no required config paths — ask the author to clarify whether the skill will read/write a local config directory.
✓
Instruction Scope
Runtime instructions stay within the service domain: create/use NEMO_TOKEN, POST to the listed endpoints, read SSE, poll job status, and return download URLs. The skill explicitly instructs not to print tokens/raw JSON. It requires adding specific attribution headers and detecting a platform string from the install path (this implies reading the agent's install path, which is reasonable for header population).
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install surface. No downloads or external installers are specified.
ℹ
Credentials
Only NEMO_TOKEN is required (primary credential). The skill includes a flow to obtain a short-lived anonymous token if NEMO_TOKEN is missing, which is consistent with its purpose. Verify whether the skill will persist tokens or write to ~/.config/nemovideo/ (frontmatter) as that affects where credentials are stored.
✓
Persistence & Privilege
Skill is not always-enabled and is user-invocable; autonomous invocation is allowed (the platform default). Nothing in the instructions requests elevated platform privileges or to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: upload images to a cloud service and return rendered videos. Before installing, consider: (1) Privacy — user images are uploaded to mega-api-prod.nemovideo.ai; confirm the service's data retention and sharing policies. (2) Tokens — the skill needs a NEMO_TOKEN or will generate a short-lived anonymous token; ask how/where tokens and session IDs are stored (SKILL.md frontmatter references ~/.config/nemovideo/ while registry metadata did not). (3) Cost/credits — anonymous tokens are limited (100 credits, 7 days); confirm billing or limits for real accounts. (4) Attribution headers — the skill will read its install path to set X-Skill-Platform; if that is a concern, request clarification. If you need stronger assurance, ask the publisher for a homepage, privacy policy, and source code, or test with non-sensitive images first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a2tds6z994n8r5rk8h03qhh84kazx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments