ClawHub

City Council Promo Video

v1.0.0

Your city just approved a $12 million park renovation, launched a new recycling program, and opened a senior services center — and the residents who would be...

⭐ 0· 55·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The name/description match the runtime instructions: the SKILL.md shows a single POST to https://mega-api-prod.nemovideo.ai using NEMO_TOKEN to generate videos. Requesting an API token for an external video generation service is proportional. Minor inconsistency: the registry summary listed no required config paths, but the SKILL.md metadata claims a config path (~/.config/nemovideo/). That path is plausible for a client library but is not used by the example curl call.
✓
Instruction Scope
The instructions are narrowly scoped: a single cURL POST to the nemo API with Authorization: Bearer $NEMO_TOKEN and JSON input. The SKILL.md does not instruct reading unrelated files, scanning system state, or transmitting data to any endpoint other than the nemo API.
✓
Install Mechanism
No install spec or code is provided (instruction-only skill), so nothing is written to disk or fetched during install. This is the lower-risk configuration for a skill that calls an external API.
ℹ
Credentials
Only NEMO_TOKEN is declared as required and used in the example, which is proportionate for an API-based video generation service. The SKILL.md metadata also lists a config path (~/.config/nemovideo/) which is not referenced by the example call — this is likely benign but should be confirmed (does the service expect a client config file?).
✓
Persistence & Privilege
The skill is not always-enabled and does not request any elevated platform privileges. It does not indicate modifying other skill configs or persistent system-wide changes.
Assessment
This skill appears to do what it claims: call the Nemo Video API to generate municipal promo videos and needs one API token (NEMO_TOKEN). Before installing: verify the skill's publisher/source (source is unknown), confirm what permissions and scope your NEMO_TOKEN grants (prefer a token scoped only to video generation), and ensure you trust https://mega-api-prod.nemovideo.ai. Note the SKILL.md metadata mentions a local config path (~/.config/nemovideo/) that the example curl does not use — ask the publisher whether the skill requires any local files. As with any third‑party API key, avoid reusing high‑privilege credentials (do not provide general-purpose cloud or admin keys) and monitor token usage after enabling the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cskgx5gjy78vytqmjvyekc984989q

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🏛️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments