ClawHub

Sora Ai

v1.0.0

Turn your ideas and raw footage into cinematic, AI-generated video content using sora-ai on ClawHub. This skill taps into Sora's generative video capabilitie...

⭐ 0· 47·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (Sora AI video generation) matches the declared primary credential (NEMO_TOKEN), the config path (~/.config/nemovideo/) and the API endpoints in the SKILL.md. There are no unrelated binaries or third-party credentials requested.
ℹ
Instruction Scope
The instructions tell the agent to read/create ~/.config/nemovideo/client_id, obtain or use NEMO_TOKEN, create sessions, upload files, stream SSE, and poll render status — all within NemoVideo's API. This is expected for an uploader/generator, but it does mean user files and prompts are transmitted to nemovideo.ai and the skill will read/write the indicated config path and detect install path for attribution headers.
✓
Install Mechanism
There is no install spec and no code files — instruction-only skill. Nothing is downloaded or written by an installer step beyond the runtime config file operations described in SKILL.md.
ℹ
Credentials
Requesting a single primary credential (NEMO_TOKEN) and using a local client_id file is proportional to the stated purpose. Minor inconsistency: frontmatter metadata lists requires.env: [] while primaryEnv is set to NEMO_TOKEN — the intent is clear but the metadata mismatch should be corrected.
✓
Persistence & Privilege
Skill is not always-enabled and does not request elevated or cross-skill configuration changes. Autonomy (agent invocation) is allowed by default but not combined with unusual privileges.
Assessment
This skill appears to do what it says: it will use your NEMO_TOKEN (or obtain an anonymous token) and read/write ~/.config/nemovideo/client_id, then upload prompts and any files you ask it to the nemovideo.ai API. Before installing, consider: (1) Only supply footage you are comfortable uploading to an external service and review NemoVideo's privacy/terms. (2) Prefer using an ephemeral or limited token if you can; do not reuse highly privileged credentials. (3) Note the small metadata mismatch (primaryEnv set but not listed in requires.env) — harmless but could be fixed by the publisher. (4) If you want tighter control, review the skill's runtime instructions and confirm the endpoints match the official service (mega-api-prod.nemovideo.ai) and that the homepage/repo are legitimate.

Like a lobster shell, security has layers — review code before you run it.

latestvk97b869gkefqwfscyam6z337m183wcqg

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Primary envNEMO_TOKEN

Comments