ClawHub

Image To Video Motion

v1.0.0

Turn a single product photo or landscape image into 1080p animated video clips just by typing what you need. Whether it's turning static photos into moving v...

⭐ 0· 30·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the actual behavior: uploading images, creating a session, sending SSE-generation commands, and retrieving a rendered MP4 from the nemovideo.ai API. Requiring an API token (NEMO_TOKEN) is expected for such a cloud service.
ℹ
Instruction Scope
Runtime instructions stay within the stated purpose (create session, upload files, start renders, poll for results). One minor scope note: the instructions ask to 'auto-detect' X-Skill-Platform from the install path (clawhub/cursor/unknown), which implies reading the agent's install path/context; this is not sensitive but is more environment interrogation than strictly needed. Otherwise the instructions do not ask for unrelated files or secrets.
✓
Install Mechanism
Instruction-only skill with no install spec or code files — lowest risk for disk persistence or arbitrary code installation.
ℹ
Credentials
Only NEMO_TOKEN is required, which is proportionate for a cloud-rendering API. However, SKILL.md frontmatter lists a config path (~/.config/nemovideo/) that the registry summary did not; this mismatch should be clarified. Also note the skill will upload images to a third-party domain (mega-api-prod.nemovideo.ai), so providing any token or allowing anonymous token issuance means your images will be transmitted to that service.
✓
Persistence & Privilege
always is false, no install-time persistence requested, and the skill does not request modification of other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uploads user images to a nemovideo.ai backend, creates a session, runs a cloud render, and returns a download URL. Before installing: 1) Decide whether you trust nemovideo.ai to receive/store/process your images and any audio/text you send — sensitive images will be uploaded. 2) Prefer supplying your own NEMO_TOKEN rather than relying on anonymous-token acquisition if you need accountability or limits. 3) Clarify the metadata mismatch: SKILL.md references a config path (~/.config/nemovideo/) while the registry summary lists none — ask the publisher whether the skill will read/write that path. 4) Be aware the skill may inspect the agent's install path to set X-Skill-Platform (minor environment access). If you are uncomfortable with third-party uploads or cannot verify the provider's privacy/security, do not install.

Like a lobster shell, security has layers — review code before you run it.

latestvk97486cf21rjhv304dkt5tfgts84wgk9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments