ClawHub

Free Gif Maker

v1.0.0

convert video clips or images into looping GIF files with this free-gif-maker skill. Works with MP4, MOV, AVI, WebM files up to 200MB. social media creators...

⭐ 0· 22·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to convert video/images to GIF/MP4 using a cloud backend and the SKILL.md exclusively describes calls to a remote nemo-video API; requiring a NEMO_TOKEN (API token) and session management is coherent with that purpose.
ℹ
Instruction Scope
The runtime instructions direct the agent to perform network calls to https://mega-api-prod.nemovideo.ai for anonymous-token acquisition, session creation, uploads, SSE chat, export, and polling — all consistent with a remote rendering workflow. The skill also instructs the agent to read its own YAML frontmatter and detect install path patterns (~/.clawhub/, ~/.cursor/skills/) to set X-Skill-Platform which requires checking the agent's filesystem for those paths. That filesystem check is narrowly scoped but should be noted.
✓
Install Mechanism
No install spec or code files are included; this is instruction-only, so nothing is written to disk by an installer. That minimizes install-time risk.
ℹ
Credentials
The only declared credential is NEMO_TOKEN which is appropriate for a service-backed converter. However, the SKILL.md frontmatter also lists a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths — this metadata mismatch is inconsistent. Also, if no NEMO_TOKEN is present, the skill will automatically request an anonymous token from the external API, which means it will make outbound network requests on first use.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. It uses session tokens for the remote API and does not request to modify other skills or system-wide config.
Assessment
This skill appears to do what it says: upload media to a remote rendering service and return a GIF/MP4. Before installing or using it, consider: (1) it will call an external endpoint (mega-api-prod.nemovideo.ai) and will mint an anonymous token if you don't provide one — only install if you trust that domain; (2) you can avoid automatic token creation by providing your own NEMO_TOKEN in the environment; (3) the SKILL.md asks the agent to inspect a few standard install paths and its own frontmatter to set attribution headers — this is limited but does read your agent environment; (4) registry metadata and SKILL.md disagree about required config paths (~/.config/nemovideo/ is present in SKILL.md metadata but not declared elsewhere) — ask the publisher for source/homepage and privacy/security docs if you need stronger assurances. If you are concerned about outbound network calls, do not install or only install after confirming the service operator and token-handling policy.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cne21akr1qeynwazg88zyw984kpr7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments