ClawHub

Easy Gif Maker

v1.0.0

Cloud-based easy-gif-maker tool that handles turning short video clips into shareable GIFs. Upload MP4, MOV, AVI, WebM files (up to 200MB), describe what you...

⭐ 0· 22·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (convert short video clips to GIF/MP4) matches the declared requirement (NEMO_TOKEN) and the SKILL.md which calls the nemo video API. No unrelated services, binaries, or credentials are requested.
✓
Instruction Scope
SKILL.md gives concrete instructions to obtain/use a session token, upload user-provided videos, stream SSE responses, poll render status, and return a download URL. It does not instruct reading unrelated system files or requesting unrelated credentials. It will request an anonymous token from the documented endpoint if NEMO_TOKEN is absent.
✓
Install Mechanism
No install spec and no code files — instruction-only. Nothing will be installed or written to disk by an installer described here.
✓
Credentials
Only one credential (NEMO_TOKEN) is required and is appropriate for a cloud rendering service. The frontmatter also lists a NemoVideo config path (~/.config/nemovideo/) which aligns with the service; no unrelated tokens or secret variables are requested.
✓
Persistence & Privilege
always is false and the skill does not request elevated or permanent presence. Autonomous invocation is allowed (platform default) but nothing in the skill demands force-inclusion or modification of other skills.
Assessment
This skill appears to do what it says: it uploads videos to https://mega-api-prod.nemovideo.ai and uses a NEMO_TOKEN (or an anonymous token it obtains) to create sessions and render outputs. Before installing or providing a persistent NEMO_TOKEN: (1) confirm you trust the nemovideo domain and are comfortable with the privacy implications of uploading video content (sensitive videos should not be uploaded); (2) prefer using the anonymous token flow if you don't want to expose an account token or credits; (3) note that there are no code files to audit — the behavior is defined by the SKILL.md and the external API endpoints it calls; (4) if you need stricter assurances, ask the publisher for a privacy/billing policy or an official homepage, or avoid supplying a permanent NEMO_TOKEN.

Like a lobster shell, security has layers — review code before you run it.

latestvk979b1tpanbj69d82j93v5mefs84j564

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments