ClawHub

Ai Image To Video

v1.0.0

social media creators convert images into animated video clips using this skill. Accepts JPG, PNG, WEBP, HEIC up to 200MB, renders on cloud GPUs at 1080p, an...

⭐ 0· 63·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill is an instruction-only adapter for a cloud rendering API and only requests a single API token (NEMO_TOKEN), which is appropriate for the stated purpose. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata reported 'Required config paths: none' — this mismatch should be clarified but does not itself indicate malicious behavior.
✓
Instruction Scope
SKILL.md confines actions to interacting with the nemo API (creating anonymous tokens, starting sessions, uploading images, polling renders, handling SSE). It does not instruct reading arbitrary system files or other environment variables. It does ask the agent to read the skill's YAML frontmatter and detect an install path for attribution headers — this may require limited filesystem access (to determine install path) but is coherent with its header-attribution requirement.
✓
Install Mechanism
No install steps or external downloads are specified (instruction-only), so nothing is written to disk by the skill itself. This is the lowest-risk install profile.
ℹ
Credentials
Only one credential is declared (NEMO_TOKEN) and is required for the external rendering API — proportionate for this functionality. The skill also documents an anonymous-token flow (POSTing a UUID to obtain a short-lived token). It is not explicit whether the skill persists tokens to disk; confirm where/if tokens and session identifiers are stored before installing.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request elevated privileges or to modify other skills. Autonomous invocation is allowed by default on the platform but is not combined with broad credentials or filesystem access here.
Assessment
This skill appears coherent for converting images to videos: it uploads user images to an external nemo API and requires a single NEMO_TOKEN. Before installing, confirm: (1) you are comfortable uploading your images to https://mega-api-prod.nemovideo.ai and understand that files and derived videos will be processed/stored by that service; (2) how and where the skill will persist the anonymous token and session_id (memory only vs written to disk); (3) the service's privacy/retention and billing/credits policies. Also ask the publisher to clarify the configPath discrepancy in the frontmatter vs registry metadata. If any of those answers are unacceptable, do not install the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97be970wkwd5f5x7gbsd74e2584k1va

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments