ClawHub

Gif Maker Free

v1.0.0

Get looping GIF files ready to post, without touching a single slider. Upload your video clips or images (MP4, MOV, GIF, WebM, up to 200MB), say something li...

⭐ 0· 60·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a cloud-based GIF/MP4 converter and only requests a single API credential (NEMO_TOKEN) needed to call the nemovideo API endpoints it documents. No unrelated binaries or credentials are requested.
ℹ
Instruction Scope
The runtime instructions direct the agent to upload user media (multipart POST) to https://mega-api-prod.nemovideo.ai, create anonymous tokens when NEMO_TOKEN is missing, open sessions, read SSE streams, and persist session_id. These actions are expected for a remote render service but mean user files and job metadata are transmitted to the external service.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing will be written to disk by an installer. This is the lowest-risk install posture.
ℹ
Credentials
Only NEMO_TOKEN is declared as required (and the SKILL.md describes generating an anonymous token if none is present). That is proportionate to calling a protected render API. Be aware the skill will accept and transmit user media to the remote service.
✓
Persistence & Privilege
The skill does not request always:true and does not attempt to modify other skills or system-wide settings. It does instruct saving session_id and token state for job tracking, which is normal for remote-session workflows.
Assessment
This skill appears to do what it says: it uploads your videos/images to a nemovideo rendering API and returns processed media. Before installing, confirm you trust the external domain (mega-api-prod.nemovideo.ai) and the operator; understand that any media you upload will be transmitted to and processed by that remote service. Note the SKILL.md metadata includes a config path (~/.config/nemovideo/) and guidance to detect install paths, while the registry summary showed no required config paths — you may want to ask the publisher to clarify that discrepancy. If you have sensitive videos, avoid uploading them to this service unless you verify its privacy policy and operator. Finally, keep NEMO_TOKEN private and only provide tokens you control; the skill’s instructions explicitly generate and store session tokens for rendering.

Like a lobster shell, security has layers — review code before you run it.

latestvk970fnmddkafdvx025f565f5mh84m4c5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments