ClawHub

Ai Video Creator From Images

v1.0.0

turn images into animated image videos with this skill. Works with JPG, PNG, WEBP, HEIC files up to 200MB. marketers, social media creators use it for turnin...

⭐ 0· 23·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description, endpoints, and the single required credential (NEMO_TOKEN) all align with a cloud-rendering video service. Minor inconsistency: the SKILL.md frontmatter references a config path (~/.config/nemovideo/) while the registry metadata listed no required config paths — this appears informational and not essential to the skill's core purpose.
✓
Instruction Scope
Runtime instructions are limited to: using NEMO_TOKEN or obtaining an anonymous token from the provided API, creating a session, uploading user images, streaming SSE events, and exporting renders. The instructions do not ask the agent to read unrelated host files or other environment secrets. Note: upload steps assume the agent can access user-provided image files to send them to the remote API — this is expected for the feature.
✓
Install Mechanism
No install spec or code files are present (instruction-only), which is the lowest-risk pattern — nothing is written to disk by the skill itself.
ℹ
Credentials
Only NEMO_TOKEN is declared as required and is justified by the API usage. The skill instructs how to obtain an anonymous token if none is provided. The minor metadata/config-path mismatch (SKILL.md lists ~/.config/nemovideo/) should be clarified but does not materially expand credential scope.
✓
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence and does not instruct modifying other skills or system-wide configuration. Autonomous invocation is allowed (default) but that is normal for skills.
Assessment
This skill appears coherent, but note: it uploads your images to an external endpoint (mega-api-prod.nemovideo.ai). Only provide images you are willing to send to that service and do not include sensitive personal data. If you supply NEMO_TOKEN as an environment variable, it grants the skill access to your account on that backend — keep tokens secret. The skill can also obtain an anonymous short-lived token if none is provided; that behaviour is expected but you may prefer to supply your own token. Ask the publisher to clarify the ~/.config/nemovideo/ reference in the frontmatter if you want to know whether any local config will be read or written.

Like a lobster shell, security has layers — review code before you run it.

latestvk974awzkaq3s1wv6gg70g0679584qqep

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments