Best Gif Maker
v1.0.0social media creators convert video clips into looping GIF clips using this skill. Accepts MP4, MOV, AVI, WebM up to 200MB, renders on cloud GPUs at 720p, an...
⭐ 0· 24·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name and description (convert short video clips to looping GIF/MP4 via remote rendering) line up with the declared primary credential (NEMO_TOKEN) and the REST endpoints in SKILL.md. Minor inconsistencies: the SKILL.md frontmatter references a config path (~/.config/nemovideo/) that the registry metadata did not list, and there are small timing inconsistencies (20–40s vs 30–90s) in the doc.
Instruction Scope
Instructions are specific to the nemo backend (session creation, SSE, upload, export) and stay within the skill's stated domain. They instruct the agent to auto-request an anonymous token and create sessions, upload user files, read SSE streams, and poll state — all expected for a remote render service. Points to watch: the agent is asked to auto-detect an install path (for X-Skill-Platform header) and to store session_id/token; those require filesystem or environment access and the doc does not specify secure storage location. The skill does not instruct reading unrelated system files, but the config path mentioned in the SKILL.md could imply local config access.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing is downloaded or written by an installer step described in the registry.
Credentials
Only one credential is required (NEMO_TOKEN), which is appropriate for a single remote rendering service. However, SKILL.md references storing tokens and a local config directory (~/.config/nemovideo/), which is not declared in the registry's required configPaths — a minor mismatch. The skill also advises generating an anonymous token programmatically if NEMO_TOKEN is not present.
Persistence & Privilege
The skill does not request always:true or elevated platform privileges. It expects to create and use session tokens and to persist them for ongoing jobs, which is reasonable for a render pipeline. It does not instruct modifying other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: it uploads your video to a third‑party rendering backend (mega-api-prod.nemovideo.ai) and returns processed MP4/GIF outputs. Before installing: (1) confirm you trust the nemo domain and owner (no homepage provided); (2) accept that your uploaded videos will be sent off‑device to that service; (3) ask where the skill will store the anonymous token/session ID (environment variable vs a local config file) and whether you can revoke it; (4) if you handle sensitive footage, avoid uploading until you verify the service's privacy/retention policy; and (5) note the small metadata mismatch (SKILL.md mentions a local config path not declared in registry) — ask the publisher to clarify where credentials/sessions are stored. If any of these concerns are unacceptable, do not enable the skill or run it only with non-sensitive test clips.Like a lobster shell, security has layers — review code before you run it.
latestvk97ekgvnptxc4v49rzypa98a3s84jftz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN