ClawHub

Free Video Generator Ai

v1.2.1

The free-video-generator-ai skill on ClawHub lets you build, trim, splice, and stylize videos through plain conversation — no timelines, no manual rendering...

⭐ 0· 128·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a video creation/editing frontend that uses nemovideo's API. Requiring an API token (NEMO_TOKEN) and using the nemovideo API domain (mega-api-prod.nemovideo.ai) is appropriate. The metadata's declared config path (~/.config/nemovideo/) matches the SKILL.md instructions. One minor inconsistency: the registry metadata lists NEMO_TOKEN as a 'required' env var while the SKILL.md says a token will be auto-generated if not present.
✓
Instruction Scope
SKILL.md gives concrete runtime steps: greet the user, read/create ~/.config/nemovideo/client_id, call the nemovideo anonymous-token API, create sessions, route user intents to endpoints, and handle uploads/exports. These actions stay within the stated purpose (auth + API calls + small local persistence). There is no instruction to read unrelated files, other skills' configs, or system secrets.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files; nothing is written beyond what the instructions explicitly say (the client_id file). That minimizes disk execution risk.
ℹ
Credentials
Requesting an API token (NEMO_TOKEN) as the primary credential is proportional. The SKILL.md explicitly supports auto-generating an anonymous token and persisting a non-secret client_id. The only inconsistency is the registry metadata marking NEMO_TOKEN as required while SKILL.md lists it as optional (auto-generated); this is a minor metadata mismatch but not an obvious security issue.
✓
Persistence & Privilege
The skill writes only to its declared config path (~/.config/nemovideo/client_id) to persist a UUID. always is false and the skill does not request system-wide config changes or other skills' credentials. Agent autonomous invocation is allowed (platform default) and is not a unique escalation here.
Assessment
This skill appears to do what it says: it contacts nemovideo's API and will persist a single non-secret UUID at ~/.config/nemovideo/client_id and may obtain a short-lived anonymous token. Before installing: (1) confirm you are comfortable uploading your video content to nemovideo.com (review their privacy/terms); (2) if you prefer, create and provide your own NEMO_TOKEN from nemovideo rather than relying on an anonymous token; (3) be aware the skill will persist a client_id file in your home config directory (UUID only); and (4) note the small metadata mismatch (registry claims NEMO_TOKEN required while SKILL.md shows it can be auto-generated) — this is likely benign but you may want to verify the published repository/homepage links if you need stronger assurance.

Like a lobster shell, security has layers — review code before you run it.

latestvk9758990t34k0vejmkkks6vvyh83xt33

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments