Morning Routine Video
v1.0.1Describe your morning routine and NemoVideo creates the video. Morning habit stack walkthroughs, wake-up ritual documentation, exercise and movement content,...
⭐ 0· 46·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description claim to make videos from morning-routine descriptions and the instructions explain how to connect to a NemoVideo backend, upload content, and obtain an anonymous token. Required capabilities align with the stated purpose. Minor inconsistency: homepage is nemovideo.com while the runtime backend domain is mega-api-prod.nemovideo.ai (plausible but worth verifying).
Instruction Scope
Instructions explicitly call out network interaction (curl to the NemoVideo API) and ask to read/write a per-user client_id at ~/.config/nemovideo/client_id and to store a session token as NEMO_TOKEN. Those actions are appropriate for a cloud video service, but the SKILL.md references an $API variable without defining it and instructs proactive greetings and setup behavior; you should verify the intended API base URL and confirm you are comfortable with the skill uploading video content to that external host.
Install Mechanism
No install steps or additional packages — instruction-only. Lower risk because nothing is downloaded or executed on install.
Credentials
No required environment variables are declared by the registry metadata. The skill optionally uses/sets NEMO_TOKEN and reads/writes a client_id file in the user's home directory. Requesting a token for the service is proportional to its functionality; it does not ask for unrelated credentials.
Persistence & Privilege
always:false (no forced always-on). The skill persists a client_id to ~/.config/nemovideo/client_id and stores an anonymous session token in NEMO_TOKEN for the session; this is within-scope for a client library, but you should be aware it writes to your home config and keeps a session token in-process/session-scoped environment.
Assessment
This skill appears to do what it says: it will contact NemoVideo's API and may upload your video or text to that external service and store a client_id under ~/.config/nemovideo/client_id and an anonymous session token (NEMO_TOKEN) for the session. Before installing, consider: (1) Verify the API hostname (mega-api-prod.nemovideo.ai) is expected and matches the vendor's privacy/terms; (2) Do not upload sensitive personal data you wouldn't want sent to an external service; (3) Expect a file to be written at ~/.config/nemovideo/client_id and a session token stored in the agent process environment — remove those if you uninstall; (4) If you need stronger assurances, ask the publisher for their exact API base URL and privacy policy. If those points are acceptable, the skill's behavior is proportionate to its purpose.Like a lobster shell, security has layers — review code before you run it.
latestvk9718v1p9nvmq57pp1wf5xzyw583qckb
License
MIT-0
Free to use, modify, and redistribute. No attribution required.