ClawHub

Animated Video Creator

v1.0.0

marketers, small business owners, content creators create text or images into animated MP4 videos using this skill. Accepts PNG, JPG, MP4, GIF up to 200MB, r...

⭐ 0· 66·0 current·0 all-time
by@tk8544-b
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description match the runtime instructions: the skill talks to an external Nemo video API, uploads media, starts render jobs, and returns MP4s. Requesting a NEMO_TOKEN (and using it as a Bearer token) is coherent with that purpose.
ℹ
Instruction Scope
Instructions focus on API calls needed for sessions, SSE, uploads, and exports. They also describe auto-acquiring an anonymous token if NEMO_TOKEN is absent, and say to derive some headers from the skill's YAML frontmatter and detect an install path to set X-Skill-Platform — this may cause the agent to read the skill file and/or probe common install paths. That is plausible for attribution but is broader filesystem awareness than strictly necessary.
✓
Install Mechanism
No install spec or code is present (instruction-only). No downloads or archive extraction are requested, minimizing installation risk.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is declared, which is proportionate. The SKILL.md also describes minting an anonymous token via the service if no env var exists (reasonable). There is a minor metadata mismatch: the SKILL.md frontmatter references a config path (~/.config/nemovideo/) and install-path detection, while the registry metadata reported no required config paths.
✓
Persistence & Privilege
The skill does not request always: true or other elevated persistence. It creates short-lived sessions/tokens with the backend and does not claim to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it talks to an external Nemo video API, uploads media, and returns rendered MP4s. Before installing, consider: (1) the service will receive any media you upload — avoid sending sensitive images or proprietary assets until you confirm the provider's privacy/retention policy; (2) the skill will use NEMO_TOKEN (or mint a short-lived anonymous token) — prefer using a scoped token you can revoke; (3) the SKILL.md references reading the skill frontmatter and detecting common install paths for attribution headers — if you are uncomfortable with any filesystem probing, ask the publisher to remove or clarify that behavior; (4) the skill has no listed homepage or publisher info — if you need stronger trust, request publisher details or documentation before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9709rwg9bf8rakqy3k50nvx1n84jn6h

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments