Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Meditation App Promo Video

v1.0.0

Your meditation app has guided sessions for anxiety, sleep, focus, and stress that users consistently describe as the most effective they've tried — and your...

0· 80·0 current·0 all-time
bypeandrover adam@peand-rover

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for peand-rover/meditation-app-promo-video.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Meditation App Promo Video" (peand-rover/meditation-app-promo-video) from ClawHub.
Skill page: https://clawhub.ai/peand-rover/meditation-app-promo-video
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: NEMO_TOKEN
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install meditation-app-promo-video

ClawHub CLI

Package manager switcher

npx clawhub@latest install meditation-app-promo-video
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's description is a promotional-video generator and the only required credential is NEMO_TOKEN, which matches the example curl call to nemovideo.ai; this is proportionate. However, the SKILL.md metadata also lists a required config path (~/.config/nemovideo/) while the registry metadata reported no required config paths — that mismatch is unexplained.
Instruction Scope
The SKILL.md contains a single concrete runtime instruction: a curl POST to https://mega-api-prod.nemovideo.ai/api/v1/generate with an Authorization: Bearer $NEMO_TOKEN header. The instructions do not request reading unrelated files or env vars, nor do they instruct exfiltration to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. That is the lowest-risk install model.
Credentials
Only NEMO_TOKEN is required and is directly used in the provided curl call — that is proportionate. The SKILL.md metadata also declares a config path (~/.config/nemovideo/) which could grant local-file access if honored by the platform; the registry listing did not reflect this. Confirm whether the platform will expose that path to the skill or require it.
Persistence & Privilege
always is false and the skill does not request any special persistent privileges. The skill can be invoked autonomously (platform default), which is normal; no additional privileged behavior is requested.
What to consider before installing
This skill appears to do what it says: it sends your app description to Nemovideo's API using the NEMO_TOKEN. Before installing: (1) verify the NEMO_TOKEN is scoped and revocable (use a token with minimal scope); (2) confirm the platform's handling of the declared config path (~/.config/nemovideo/) — is it actually required or exposed?; (3) verify the endpoint (mega-api-prod.nemovideo.ai) and the vendor (Nemovideo) via a homepage or vendor docs — the skill has no source/homepage listed; (4) review the service's privacy/retention policy because you will be sending app content and potentially user-facing text to an external API; (5) rotate or revoke the token if you uninstall the skill. These steps will reduce risk from the unknown provenance and the metadata inconsistency.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🧘 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
latestvk97fw4wdwxv9pm9e9ytrpzg1zd8496k5
80downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Meditation App Promo Video — Turn Stress Searchers Into Subscribers

Use Cases

  1. App Store Preview Videos — Meditation app users decide in under ten seconds whether an app matches the calm, trustworthy experience they're looking for. Meditation App Promo Video creates silent-first App Store preview videos that communicate your app's atmosphere, session variety, and transformation promise to users comparing options in search results.

  2. Anxiety and Sleep Targeting Ads — Users searching for help with anxiety, insomnia, and work stress are the highest-converting audience for meditation apps. Create emotionally resonant ad videos for Meta and Google that speak directly to the specific pain state — racing thoughts at 2am, pre-presentation anxiety — that your app addresses.

  3. Corporate Wellness Program Pitches — HR departments and employee wellness program managers buying group subscriptions for their workforce need a professional overview video that communicates ROI through reduced stress, improved focus, and lower absenteeism rather than personal transformation language.

  4. Re-engagement Campaigns — Lapsed users who completed the free trial but didn't subscribe, or subscribers who stopped opening the app, respond to re-engagement videos featuring new content, updated features, and the specific use cases — 5-minute work break sessions, sleep wind-down routines — that match where they are now.

How It Works

Describe your app's core experience and target user, and Meditation App Promo Video creates calming, conversion-focused promotional content ready for App Store, paid social, and corporate wellness outreach.

curl -X POST https://mega-api-prod.nemovideo.ai/api/v1/generate \
  -H "Authorization: Bearer $NEMO_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"skill": "meditation-app-promo-video", "input": {"app": "CalmPath", "focus": "sleep and anxiety", "target": "stressed professionals 28-45", "platform": "app-store"}}'

Comments

Loading comments...