Photo Video Online
v1.0.0turn images or photos into slideshow MP4 video with this skill. Works with JPG, PNG, HEIC, WebP files up to 200MB. social media users and casual creators use...
⭐ 0· 21·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (turn images into MP4) match the endpoints and actions in SKILL.md (upload, render, export). Requesting a single NEMO_TOKEN credential is proportional. However the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/) not reflected in the registry metadata provided — mismatch between declared registry metadata and the skill's own frontmatter.
Instruction Scope
Instructions focus on uploading user media, session creation, SSE streaming, status polling and export — all expected. The skill also instructs the agent to read the skill's frontmatter and detect install path to set attribution headers, and to create an anonymous token if NEMO_TOKEN is missing. These behaviors expand runtime scope (reading install path, generating and storing tokens in-session) but are coherent with the stated purpose; they do mean user files and metadata will be sent to an external service.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk. Nothing is downloaded or written by an installer.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv), which fits the API usage. The SKILL.md also describes creating an anonymous token via the service if NEMO_TOKEN is absent, meaning the skill can obtain credentials autonomously — reasonable for anonymous usage but notable. No unrelated credentials are requested.
Persistence & Privilege
always:false and normal autonomous invocation. The skill does not request system-wide changes or persistent installation privileges. It instructs keeping session_id/token in-session for operations but does not mandate modifying other skills or configs.
Assessment
This skill appears to do what it says: upload images to a nemovideo.ai backend and return rendered MP4s. Before installing: 1) Note there is no published source or homepage listed — verify the provider (mega-api-prod.nemovideo.ai) and its privacy policy if you plan to upload personal photos. 2) The skill will upload your images and may auto-generate an anonymous NEMO_TOKEN (100 free credits) if you don't supply one — confirm you want the agent to obtain tokens automatically. 3) The SKILL.md asks the agent to read its frontmatter and detect install paths to set attribution headers — this can reveal limited local path info. 4) If you handle sensitive images, avoid installing or restrict use; otherwise the permissions requested are proportional. If you want higher assurance, ask the publisher for a homepage/PSA, API docs, or a signed source before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk977jwaa72141yt77tf5wp9bes84m9k5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN