Easy Image To Video
v1.0.0social media creators convert images into animated video clips using this skill. Accepts JPG, PNG, WEBP, HEIC up to 200MB, renders on cloud GPUs at 1080p, an...
⭐ 0· 65·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill name/description (convert images to videos) aligns with the declared requirement NEMO_TOKEN and the documented API endpoints for uploads, session creation, rendering, and credits. The declared config path (~/.config/nemovideo/) and primaryEnv (NEMO_TOKEN) are appropriate for this purpose. There are no unrelated environment variables or binaries requested.
Instruction Scope
SKILL.md explicitly instructs the agent to obtain or use a NEMO_TOKEN, create sessions, upload image files, stream SSE events, poll render status, and return download URLs. All file access and network calls are scoped to the described rendering workflow. The doc warns not to print tokens and describes how to handle SSE and errors. It does instruct detection of install path and reading its own frontmatter for attribution headers, which is reasonable for header population.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is downloaded or written by an installer. That is the lowest-risk install model and matches the skill's behavior.
Credentials
Only one credential is requested (NEMO_TOKEN) and the SKILL.md uses it for Bearer auth. The skill also supports generating an anonymous token if no env var is present. The declared config path matches where session/credentials would reasonably be stored. No unrelated secrets or multi-service credentials are requested.
Persistence & Privilege
always:false (default) and normal model invocation are used. The skill will create and save a session_id (expected for long-running render jobs) but does not request elevated platform privileges or modify other skills. Note: allowing the agent to call this skill autonomously means it can initiate uploads/renders when triggered by user input.
Assessment
This skill appears coherent: it uploads images to mega-api-prod.nemovideo.ai for cloud GPU rendering and uses a single service token (NEMO_TOKEN) or an anonymous token it can obtain. Before installing, consider: (1) Privacy — any images you provide will be sent to nemovideo's servers, so avoid uploading sensitive content. (2) Token handling — if you set NEMO_TOKEN, the agent will use it for all API calls; otherwise it will create an anonymous token tied to a generated UUID. (3) Storage — the skill mentions a config path (~/.config/nemovideo/) and will save session IDs; check that location if you need to inspect or delete persisted data. (4) Source trust — the package has no homepage and the publisher ID is opaque; if you need a vendor or privacy policy, seek additional information or prefer a provider you trust. If you want tighter control, do not set a long-lived NEMO_TOKEN and avoid enabling autonomous invocations that could upload files without explicit confirmation.Like a lobster shell, security has layers — review code before you run it.
latestvk977xfehe3j4e652y5nhp2b19184j2zv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN