ClawHub

Ai React Component Generator

v1.0.0

generate component description text into React component videos with this skill. Works with MP4, MOV, WebM, AVI files up to 200MB. frontend developers use it...

⭐ 0· 20·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to convert text descriptions into rendered video components and only requests a single service credential (NEMO_TOKEN) and calls rendered-media endpoints on a named API host — this is proportionate to the stated purpose.
ℹ
Instruction Scope
Runtime instructions include creating an anonymous token when NEMO_TOKEN is not present, creating and storing a session_id, uploading files, using SSE endpoints, and polling render status — all expected for a remote render workflow. Slight scope concerns: the frontmatter implies reading an install path to set X-Skill-Platform (which would require checking local paths), and instructions say to avoid displaying raw API responses or token values to the user (reduces transparency).
✓
Install Mechanism
No install spec and no code files — instruction-only skill means nothing is written to disk by an install mechanism. Low installation risk.
✓
Credentials
Only one credential is declared (NEMO_TOKEN) and it directly maps to the described remote API usage. The skill also documents obtaining an anonymous token if none is present, which is consistent with offering a temporary usage path.
✓
Persistence & Privilege
always:false and no instructions to modify other skills or system-wide settings. The skill asks to store session_id for its own requests, which is normal for session-based APIs.
Assessment
This skill appears coherent for a cloud video-rendering service: it needs one service token and will talk to https://mega-api-prod.nemovideo.ai to create sessions, stream SSE, upload files, and return download URLs. Before installing: (1) note the package has no public homepage or known source — verify the API domain and vendor if you require accountability; (2) if you want control or quick revocation, set your own NEMO_TOKEN rather than relying on the skill's anonymous-token flow; (3) avoid uploading sensitive or private video data to an unknown third-party service; (4) be aware the instructions ask the agent not to show raw API responses or tokens — if you need transparency, require the skill to surface those values; (5) if you are concerned about the agent reading local paths (for X-Skill-Platform detection), ask for clarification on whether the skill will access your filesystem. If any of these points are unacceptable, do not install or require the developer to provide a verifiable homepage and privacy/retention policy.

Like a lobster shell, security has layers — review code before you run it.

latestvk979kz4xbx6nxd9g8nd03vzg2984pdaq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚛️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments