ClawHub

Animation Maker

v1.0.0

create images or text into animated MP4 videos with this skill. Works with PNG, JPG, SVG, MP4 files up to 200MB. marketers, social media creators, small busi...

⭐ 0· 22·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (create animated MP4s) matches requirements and instructions: the skill calls a nemo video rendering API and only requests a service token and an optional config path under ~/.config/nemovideo/. No unrelated credentials, binaries, or install steps are requested.
ℹ
Instruction Scope
Runtime instructions include making network requests to mega-api-prod.nemovideo.ai (session creation, SSE, upload, export), generating an anonymous token if NEMO_TOKEN is not present, and saving session_id. These behaviors are consistent with the described purpose, but the skill will upload user files to the third-party service and may read/detect install paths (it references detection of install path to set X-Skill-Platform). The SKILL.md warns not to print tokens but does not specify secure persistent storage for tokens/session IDs.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. No downloads or package installs are requested.
✓
Credentials
Only a single service credential (NEMO_TOKEN) and a related config path (~/.config/nemovideo/) are declared. That matches an integration that needs a session token to call the backend. No unrelated secrets or multiple credential types are requested.
✓
Persistence & Privilege
always is false and the skill does not request system-wide privileges. It instructs saving a session_id and using an environment token; this is normal for a session-based API integration and does not modify other skills or system configs.
Assessment
This skill talks directly to a third-party rendering API and will upload any files you give it to that service. Before installing or using it: (1) confirm the external domain (mega-api-prod.nemovideo.ai) and that you trust that provider; (2) avoid providing unrelated credentials — only supply a NEMO_TOKEN for the nemo service; (3) prefer a limited or anonymous token (the skill offers an anonymous token flow) for testing, and be aware tokens expire; (4) assume uploaded media and project data will be transmitted and possibly persisted by the vendor — do not upload sensitive or regulated content unless you’ve verified their privacy/retention policy; (5) if you are concerned about filesystem access, note the skill may check typical install/config paths (e.g., ~/.config/nemovideo/) to detect platform attribution.

Like a lobster shell, security has layers — review code before you run it.

latestvk979zymx44f52asdz3kc224n3n851ztm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments