ClawHub

Easy Video Generation

v1.0.0

generate text or images into ready-to-share videos with this easy-video-generation skill. Works with MP4, MOV, JPG, PNG files up to 200MB. small business own...

⭐ 0· 25·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the declared requirements: the skill needs a NEMO_TOKEN and references upload, session, render, and export endpoints for a video-rendering service. There are no environment variables or binaries requested that are unrelated to video processing. The declared config path (~/.config/nemovideo/) is plausible for caching tokens or session state.
ℹ
Instruction Scope
SKILL.md stays within the service's scope: it instructs obtaining/using a token, creating a session, uploading files, sending SSE messages, polling render status, and returning a download URL. One minor scope oddity: it asks to derive an attribution header from the agent's install path (checking ~/.clawhub/ or ~/.cursor/skills/) — that would require the agent to probe common install locations for platform attribution, which is unnecessary for core functionality but not directly harmful.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk by an installation step. This is the lowest-risk install model.
✓
Credentials
Only one credential (NEMO_TOKEN) is required and it is the primary credential used for Bearer auth in all API calls—this is proportionate to the stated task. The SKILL.md also documents an anonymous-token flow when the env var is absent, which is reasonable.
✓
Persistence & Privilege
always is false and the skill does not request system-wide configuration changes or cross-skill credentials. It instructs saving session_id and token for the session, which is normal for this kind of integration.
Assessment
This skill appears internally consistent with a cloud video-rendering API: it only asks for a single NEMO_TOKEN and documents the endpoints it will call. Before installing or supplying files/credentials, consider: 1) The registry entry has no homepage or verifiable vendor info—confirm you trust mega-api-prod.nemovideo.ai and the skill author. 2) A NEMO_TOKEN grants access to your uploads and rendering jobs—don't reuse high-privilege keys; prefer a scoped/ephemeral token if possible. 3) Avoid uploading sensitive personal data or proprietary assets until you verify the service's privacy/retention policies. 4) The skill may probe common install paths only to form an attribution header—if you prefer, restrict the agent's filesystem access. If you need higher assurance, ask the author for a homepage, privacy policy, or source repository before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bqzfxvhwmbzt5r3e3zwwdxn84jq5e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments