ClawHub

Ai Video Thumbnail Maker

v1.0.0

Generate click-worthy thumbnails from any video with AI — extract the best frame, enhance faces, add bold text overlays, apply proven thumbnail compositions,...

⭐ 0· 66·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description match the runtime instructions: the SKILL.md shows calls to an external NemoVideo API to extract frames, enhance faces, add text overlays and produce variations. Requesting a single service token (NEMO_TOKEN) is coherent with this purpose.
ℹ
Instruction Scope
The SKILL.md contains a cURL example that uploads video data to https://mega-api-prod.nemovideo.ai with Authorization: Bearer $NEMO_TOKEN — this is expected for an external thumbnail API. The instructions do not request unrelated system files, but they do imply uploading potentially sensitive video content to a third party; the metadata also references a local config path (~/.config/nemovideo/) which suggests the agent may read local config to find credentials.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files, so nothing is written to disk or fetched at install time — lowest-risk install posture.
ℹ
Credentials
The single primary credential NEMO_TOKEN is appropriate for calling the external API. However there is a small inconsistency: registry metadata reported no required env vars while SKILL.md metadata and the cURL example rely on NEMO_TOKEN and reference a config path (~/.config/nemovideo/). Confirm whether the token is required and how it should be provided (env vs config file).
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or system-wide configuration changes.
Assessment
This skill appears to do what it claims: it will upload video content to a NemoVideo API and requires a NEMO_TOKEN. Before installing, verify the service domain (mega-api-prod.nemovideo.ai) and NemoVideo's trustworthiness and privacy policy, avoid uploading sensitive/private videos unless you accept third-party processing, confirm how to supply the NEMO_TOKEN (env var vs ~/.config/nemovideo/), and test with non-sensitive content first. If you don’t want your videos leaving your environment, do not use this skill. If anything about the token handling or config-path usage is unclear, ask the publisher for clarification before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk971cenm9neygpfs5nent9gprd83rgkm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
Primary envNEMO_TOKEN

Comments