ClawHub

Ai Video Maker For Free

v1.0.0

Cloud-based ai-video-maker-for-free tool that handles generating videos from images or clips without manual editing. Upload MP4, MOV, JPG, PNG files (up to 5...

⭐ 0· 20·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill name/description (cloud AI video creation) matches its runtime actions: creating a session, uploading media, sending render/export requests, and polling for results. Requesting a NEMO_TOKEN is reasonable for authorizing requests to the described API.
ℹ
Instruction Scope
SKILL.md only instructs network calls to the nemovideo backend, handles SSE, and uploads user-supplied media — all expected for a cloud render service. It instructs generating an anonymous token if NEMO_TOKEN is not present and requires attribution headers. This means user files will be sent to an external domain (mega-api-prod.nemovideo.ai) and long-lived SSE connections may be opened; that's expected but worth noting.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk (nothing is written to disk by an installer).
ℹ
Credentials
The skill declares a single credential (NEMO_TOKEN) as primary, which is proportional. However metadata also lists a config path (~/.config/nemovideo/), which implies the agent may look for local stored tokens/config there; SKILL.md doesn't explicitly describe reading that path. Consider whether you want the agent to access local config files.
✓
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill does not request system-wide privileges or modifications to other skills; no persistence concerns beyond normal token usage.
Assessment
This skill looks like a straightforward wrapper for a cloud video-rendering API and asks only for a single token, but there are a few practical safety checks to do before installing: - Trust and domain: the source/homepage are missing; the skill will upload your media to mega-api-prod.nemovideo.ai. Only use with non-sensitive/test media until you verify the service and privacy policy. - Token handling: prefer providing a short-lived or anonymous token instead of a long-lived secret NEMO_TOKEN. The skill can request an anonymous token automatically, which limits exposure. - Local config: metadata mentions ~/.config/nemovideo/ — confirm whether you want the agent to read that config directory (it could contain saved tokens or settings). - Attribution headers & metadata: the skill requires custom headers on every API call; that’s operationally consistent but means the agent will include skill-identifying headers when talking to the external service. If you plan to proceed, test with disposable media and an anonymous token first. If you need higher assurance, ask the publisher for a homepage or privacy/security documentation before sending private or proprietary content.

Like a lobster shell, security has layers — review code before you run it.

latestvk9789rhq5cjpac1j2qs15tksqs84jvxh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments