ClawHub

Ai Image To Video Jiggle

v1.0.0

Get animated video clip ready to post, without touching a single slider. Upload your still images (JPG, PNG, WEBP, HEIC, up to 200MB), say something like "ad...

⭐ 0· 52·0 current·0 all-time
by@nemovideonemo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is an image-to-video renderer and only requests a single service credential (NEMO_TOKEN) and a Nemo-related config path; those align with contacting a remote rendering API. There are no unrelated env vars or binaries required that would be inconsistent with the declared purpose.
✓
Instruction Scope
SKILL.md confines actions to: checking/creating a NEMO_TOKEN (anonymous token flow), creating a session, uploading user images, polling render endpoints, and returning download URLs. It instructs reading its own YAML frontmatter and detecting install path (to set attribution headers). It does not instruct reading arbitrary system files or other credentials, but it will transmit user images and metadata to an external API.
✓
Install Mechanism
No install spec or external downloads are present (instruction-only). This minimizes risk from installation-time code execution or arbitrary downloads.
ℹ
Credentials
Only NEMO_TOKEN is required, which is proportional for a connector to the Nemo service. Metadata also lists a config path (~/.config/nemovideo/) which SKILL.md does not explicitly reference — this is a small inconsistency but not a major concern. The skill can also obtain an ephemeral anonymous token itself if no NEMO_TOKEN is present.
✓
Persistence & Privilege
The skill does not request persistent platform privileges (always:false) and does not indicate modifying other skills or system-wide settings. Session IDs and tokens are used for service calls only.
Assessment
This skill appears to do what it says: it will upload any images you give it to mega-api-prod.nemovideo.ai for cloud rendering and needs a NEMO_TOKEN (or will create an anonymous 7-day token). Before installing or using it: (1) be comfortable with your images being sent to that third-party service (check privacy/retention if images are sensitive); (2) only provide a NEMO_TOKEN you intend to use for this service (consider a limited-scope or temporary token if possible); (3) note the skill can generate an anonymous token itself if none is provided; (4) the skill’s source and homepage are unknown—if provenance matters, prefer a skill backed by a known provider; and (5) if you see unexpected prompts to supply unrelated secrets or system files, stop and revoke any exposed tokens.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c9vkn92w7c39834k1gkwb0x84s3qr

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments