Hotel Video Maker

v1.0.4

Hotel Video Maker — Create Property Tour and Booking Videos for Hotels and Airbnb. Listings with walkthrough videos receive forty-three percent more bookin...

1· 129·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The skill is described as a cloud video creation tool and declares an API domain and a single credential (NEMO_TOKEN). Requesting a service token to call nemovideo.ai is proportionate to the stated purpose. Note: SKILL.md metadata lists a config path (~/.config/nemovideo/) while the registry metadata summary reported 'Required config paths: none' — this mismatch should be clarified but is plausibly for storing the token or client config.
Instruction Scope
SKILL.md is mostly a product/usage description and contains no explicit runtime commands or detailed instruction steps (no file I/O, no shell commands, no explicit API call examples). That makes the skill an instruction-only description + metadata; the agent will need to implement calls to the declared apiDomain. Because runtime behavior is not concretely specified, the agent's implementation choices (what files to read and what to send) will determine actual data access.
Install Mechanism
No install spec and no code files are present (instruction-only). Nothing will be written to disk by an installer; this is the lowest-risk install profile.
Credentials
Only one required env var is declared (NEMO_TOKEN), which is appropriate for authenticating with a cloud API. The SKILL.md metadata also mentions a config path (~/.config/nemovideo/) that could be used to store credentials — this is reasonable but inconsistent with the registry's earlier 'no config paths' assertion and should be clarified. No other secrets or unrelated credentials are requested.
Persistence & Privilege
The skill is not set to always:true and is user-invocable. Autonomous invocation is allowed (platform default) but there is no requested permanent system presence or modification of other skill configs.
Assessment
This skill appears to be a straightforward connector to the Nemovideo cloud service and only requests a single service token (NEMO_TOKEN). Before installing: (1) confirm NEMO_TOKEN is scoped to the Nemovideo service and that you trust apiDomain=https://mega-api-prod.nemovideo.ai and the homepage nemovideo.com; (2) ask the publisher to clarify the metadata mismatch: SKILL.md lists ~/.config/nemovideo/ while registry metadata reported no config paths — verify whether the skill will read or write that local config; (3) consider what data you'll upload (video files may contain PII or customer data) and review Nemovideo's privacy/storage policies; (4) if you provision a token, restrict its scope and be prepared to rotate it if you remove the skill. If you need stronger guarantees, request explicit runtime instructions from the author showing exactly which files are read and what is sent to the API.

Like a lobster shell, security has layers — review code before you run it.

latestvk97d06xtb9sbcabfzrhq8nje3583x1xc

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🏨 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments