ClawHub

Ai Image To Video Editor

v1.0.0

Get animated video clips ready to post, without touching a single slider. Upload your images (JPG, PNG, WEBP, HEIC, up to 200MB), say something like "turn th...

⭐ 0· 49·0 current·0 all-time
by@susan4731-wilfordf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the behavior: the skill uploads images and drives a cloud render API. Requesting a single service token (NEMO_TOKEN) is appropriate for this purpose.
ℹ
Instruction Scope
Instructions stay within the editing/rendering scope (session creation, SSE chat, uploads, export polling). They instruct the agent to read the SKILL.md frontmatter (for version/source) and to probe common install paths (~/.clawhub/, ~/.cursor/skills/) to set an X-Skill-Platform header; this file-system probing is plausible for attribution but is broader than strictly needed for rendering and should be noted. The skill also performs an anonymous-token exchange when no NEMO_TOKEN is present; it does not instruct reading unrelated user files.
✓
Install Mechanism
Instruction-only skill with no install spec and no code to write to disk — lowest-risk install profile.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is required, which fits the declared cloud API use. The skill documents an anonymous-token fallback flow (POST to nemovideo.ai) to obtain temporary tokens; this is reasonable but means the agent will contact an external endpoint and obtain short-lived credentials if the user has none.
✓
Persistence & Privilege
always:false and no install or persistent filesystem writes are declared. The skill requests in-memory session handling and does not ask to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uploads images to nemovideo.ai and returns rendered videos and requires a NEMO_TOKEN (or will request an anonymous token from the service). Before installing/using: only upload images you are comfortable sending to a third-party service; consider creating and supplying your own NEMO_TOKEN if you want account isolation; be aware the skill will probe common agent install paths and read its own SKILL.md frontmatter for attribution headers. Note the minor inconsistency: the SKILL.md metadata lists a config path (~/.config/nemovideo/) while the registry record shows no required config paths — this is likely harmless but you may want to confirm how/if any tokens or files are persisted locally.

Like a lobster shell, security has layers — review code before you run it.

latestvk97a8s1nfgtzrzrs78kng433a984s116

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments