Image To Video Models
v1.0.0Get animated video clips ready to post, without touching a single slider. Upload your still images (JPG, PNG, WEBP, HEIC, up to 50MB), say something like "an...
⭐ 0· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is an instruction-only connector to a cloud video-rendering backend (mega-api-prod.nemovideo.ai). Requesting a single API token (NEMO_TOKEN) and uploading images to render videos is coherent with the stated purpose.
Instruction Scope
Runtime instructions confine actions to authenticating (or obtaining an anonymous token), creating a session, uploading images, using SSE for edits, and polling for export—all appropriate for a cloud render workflow. The skill requires attaching three attribution headers and auto-detecting an install path for X-Skill-Platform; that platform-detection requirement may be awkward for an instruction-only skill (no install path present) and could require the agent to inspect its environment. The SKILL.md also lists a config path (~/.config/nemovideo/) in its frontmatter, but the rest of the instructions never explain reading or writing that path (metadata vs. instructions mismatch).
Install Mechanism
No install spec or code files are present; this is instruction-only. Nothing is being downloaded or written by an installer—lowest install risk.
Credentials
Only one credential is required (NEMO_TOKEN / primaryEnv), which matches the described API usage. The skill additionally documents how to obtain an anonymous token if none is present. However, the frontmatter's claimed config path (~/.config/nemovideo/) is not justified in the instructions and should be clarified (why would a config file be needed?).
Persistence & Privilege
always:false and user-invocable:true (defaults) — the skill does not request forced/global inclusion. It keeps a session_id for job management (expected). It does not instruct modifying other skills or system-wide settings.
Scan Findings in Context
[NO_STATIC_SCAN_FINDINGS] expected: The regex-based scanner had no code files to analyze (instruction-only SKILL.md). No static findings were produced; this is normal for instruction-only skills but means behavior is determined entirely by the textual instructions.
Assessment
This skill appears to do what it says: it uploads images and uses a third‑party rendering API that requires a NEMO_TOKEN. Before installing, confirm you trust the service (source/homepage is missing in the registry), because your images (and any metadata) will be sent to mega-api-prod.nemovideo.ai. Ask the publisher: who runs the backend, what is the data retention/usage policy, and why does the frontmatter reference ~/.config/nemovideo/ when the instructions don't explain using it? If you proceed, prefer using an anonymous or disposable token/account for testing, avoid sending sensitive images, and verify where tokens are stored and how long they remain valid.Like a lobster shell, security has layers — review code before you run it.
latestvk97e7gns1cbpw9yq4dgdjn838n84rtay
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN