Invitation Video Maker Free Marathi
v1.0.0create images, text into Marathi invitation videos with this skill. Works with JPG, PNG, MP4, MOV files up to 200MB. Marathi-speaking event hosts use it for...
⭐ 0· 22·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to render Marathi invitation videos and its instructions call a remote rendering API and accept media uploads — that matches the stated purpose. The single required credential, NEMO_TOKEN, is appropriate for an API-backed service.
Instruction Scope
SKILL.md explicitly instructs the agent to obtain/use NEMO_TOKEN, create anonymous tokens if needed, open sessions, upload files, stream SSE, and poll render status. Those actions are expected for a cloud render pipeline. It does require sending user media and metadata to https://mega-api-prod.nemovideo.ai — users should be aware uploads leave the local environment. The file also instructs to 'save session_id' and to include attribution headers; it also warns not to print tokens or raw JSON.
Install Mechanism
Instruction-only skill with no install spec or code files — lowest install risk (nothing is written or executed locally by an installer).
Credentials
Only NEMO_TOKEN is requested (declared as primaryEnv), which is proportional to a hosted rendering service. No other secrets are requested. One mismatch: top-level registry metadata lists no required config paths, while the skill frontmatter suggests a config path (~/.config/nemovideo/). That should be clarified (read vs write?).
Persistence & Privilege
always:false and normal autonomy settings. The skill asks to save a session_id for the session lifecycle, which is reasonable. It does not request system-wide changes or other skills' configs.
Scan Findings in Context
[no-code-files] expected: The static scanner found no code because this is an instruction-only skill. That's expected; the runtime behavior is defined entirely by SKILL.md.
Assessment
This skill is mostly coherent for a cloud-based video rendering service, but check these things before installing: 1) Verify the external API domain (mega-api-prod.nemovideo.ai) and confirm you trust its privacy/retention policy for uploaded photos/videos. 2) Confirm whether the skill will read or write the local config path (~/.config/nemovideo/) — registry metadata and SKILL.md disagree. 3) Ensure NEMO_TOKEN is a dedicated token for this service (don't reuse credentials from other services). 4) Be aware that any uploaded media and text are transmitted to the remote service; avoid sending highly sensitive content. 5) If you prefer to prevent autonomous network activity, consider disabling model invocation or only enabling the skill when explicitly invoked. If you want higher assurance, ask the publisher for a homepage or company info and a privacy policy before using the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97e7d0q6xpfztbczh4wch0wt184wsjv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💌 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN