Ai Testimonial Video
v1.0.0Create customer testimonial and review videos with AI — turn written reviews, customer quotes, survey responses, and success stories into polished video test...
⭐ 0· 51·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, and declared primary credential (NEMO_TOKEN) match the runtime example (curl POST to nemovideo API). The declared config path (~/.config/nemovideo/) is plausible for storing the service token/config. No unrelated credentials, binaries, or installers are requested.
Instruction Scope
The SKILL.md instructs the agent to POST user-provided testimonial text and assets to an external API (nemovideo.ai). This is expected for a video-generation service, but it means any customer data you supply — potentially PII — will be transmitted to an external endpoint. The instructions do not (in the provided excerpt) request other system files or unrelated environment variables.
Install Mechanism
No install spec or code files — instruction-only. This minimizes local disk writes and executable installs (low install risk).
Credentials
Only a single service token (NEMO_TOKEN) is declared as primary, which is proportionate for an API-based service. Minor inconsistency: metadata lists primaryEnv: NEMO_TOKEN but requires.env is empty — in practice you will need to set NEMO_TOKEN in the environment for the curl example to work. The declared config path is reasonable but gives the skill potential access to any files under ~/.config/nemovideo/ if the agent reads them.
Persistence & Privilege
always is false, no installs, and the skill is user-invocable. It does not request persistent elevated privileges or to modify other skills/configurations.
Assessment
This skill appears to do what it says: it will send the testimonial text and any attached assets to NemoVideo's API and requires a NEMO_TOKEN API key. Before installing/providing data: (1) Verify the vendor and domain (mega-api-prod.nemovideo.ai) and review NemoVideo's privacy and data retention policies; (2) Avoid uploading sensitive personal data or regulated information about customers unless you have consent and are comfortable with the service's handling; (3) Treat NEMO_TOKEN like a secret — store it in a secure place and rotate it if compromised; (4) Confirm where the skill will read config (~/.config/nemovideo/) and ensure it doesn't contain unexpected credentials; (5) If you need stricter controls, request or require tokens scoped to the minimum necessary permissions or run a small test with non-sensitive data first.Like a lobster shell, security has layers — review code before you run it.
latestvk97dvmrbk7wsagkqyhnjc48srn83s0xs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
⭐ Clawdis
Primary envNEMO_TOKEN