ClawHub

Image To Video Maker

v1.0.0

Tired of static photos sitting in folders, never getting the attention they deserve? The image-to-video-maker skill on ClawHub breathes life into your still...

⭐ 0· 54·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (image→video) match the runtime instructions: the SKILL.md describes creating sessions, uploading images, and exporting videos to nemovideo's API. The declared primary credential (NEMO_TOKEN) and config path (~/.config/nemovideo/) are appropriate for a cloud-backed media service.
ℹ
Instruction Scope
Instructions direct the agent to check NEMO_TOKEN, read/write ~/.config/nemovideo/client_id (or generate one), create sessions, stream SSE, upload files, and query credits/state. These actions are expected for this skill, but they do involve reading/writing the user's ~/.config directory and detecting install path (~/.clawhub/, ~/.cursor/skills/) to set X-Skill-Platform — a benign but privacy-relevant action. The doc also insists on including attribution headers and warns about not exposing tokens; there is a small inconsistency around how the token is persisted (it extracts data.token but doesn't explicitly say whether to save it to env or only memory).
✓
Install Mechanism
No install spec and no code files — instruction-only. That minimizes disk-write risk and aligns with the skill being a thin connector to a third-party API.
✓
Credentials
Only a single primary credential (NEMO_TOKEN) and one config path (~/.config/nemovideo/) are requested. Those are proportional to a cloud render/upload service. No unrelated secrets or broad system credentials are requested.
✓
Persistence & Privilege
Skill is not always-enabled and allows normal autonomous invocation. It asks to create/save a client_id under ~/.config/nemovideo/, which is reasonable for client identification and does not request system-wide or other-skills' configuration changes.
Assessment
This skill will upload whatever images you provide to nemovideo's cloud (mega-api-prod.nemovideo.ai) and will create/read a small config under ~/.config/nemovideo/ (client_id). Before installing, consider: (1) Do you trust nemovideo.com and the listed GitHub repo? (verify they match and review their privacy policy), (2) Avoid uploading sensitive images to third-party services, (3) Note the skill may obtain a short-lived anonymous token if you don't supply NEMO_TOKEN — treat that token like a credential, and (4) If you prefer, create an account or test with non-sensitive photos first. If you want stronger assurance, ask the publisher for a link to the source code for this exact skill bundle and verify the API endpoints and token-handling behavior there.

Like a lobster shell, security has layers — review code before you run it.

latestvk971x09e9makf6a2z7y77gcgn583w6dz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎞️ Clawdis
Primary envNEMO_TOKEN

Comments