ClawHub

Animation Video Maker

v1.0.0

Tired of spending hours in complex animation software just to produce a short clip? The animation-video-maker skill lets you create polished animated videos...

⭐ 0· 115·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill claims to generate animated videos and its runtime instructions only require a Nemo API token, a per-client UUID stored under ~/.config/nemovideo/, and network access to mega-api-prod.nemovideo.ai—all of which are reasonable for a cloud rendering service. No unrelated credentials or binaries are requested.
✓
Instruction Scope
SKILL.md limits actions to: reading/writing ~/.config/nemovideo/client_id, obtaining or using NEMO_TOKEN, creating/using a session_id, uploading user-supplied files when asked, and sending SSE/API requests to the NemoVideo API. There are no instructions to read or exfiltrate unrelated system files or environment variables. The skill does detect an install path to populate an attribution header, which requires checking a few well-known directories in the home tree—this is plausible for service attribution.
✓
Install Mechanism
This is an instruction-only skill with no install spec or code files. Nothing will be downloaded or written to system locations beyond the explicitly documented small client config file in ~/.config/nemovideo/.
✓
Credentials
Only the NEMO_TOKEN primary credential and a local config path (~/.config/nemovideo/) are declared. The instructions explain obtaining an anonymous token if none is present. No other secrets or unrelated environment variables are requested.
✓
Persistence & Privilege
always is false and the skill does not request permanent agent-wide privileges. It will write a single small client_id file and store session/token info as needed for API calls—typical, limited persistence for a networked service.
Assessment
This skill appears to be what it says: a client for the NemoVideo rendering API. Before installing, be aware that it will: (1) make network calls to mega-api-prod.nemovideo.ai and nemovideo.com; (2) create a small file at ~/.config/nemovideo/client_id (a UUID) and may persist session/token info; (3) use an API token (NEMO_TOKEN) — provide only a token you intend to grant to this service. Do not feed it sensitive local files unless you intend to upload them to NemoVideo, and review NemoVideo’s privacy/terms on the homepage. If you want stricter control, set NEMO_TOKEN manually (so the skill cannot request anonymous tokens on its own) and inspect or remove ~/.config/nemovideo/ after use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9795ev1aeejrzy4wqt3rjjg6183wrgj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Primary envNEMO_TOKEN

Comments