ClawHub

Pet Video Maker

v1.1.0

Create shareable pet videos, animal compilations, and pet-influencer content from raw footage of dogs, cats, and every creature in between. NemoVideo handles...

⭐ 0· 46·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill describes building pet videos and its runtime instructions show API calls to a NemoVideo endpoint using NEMO_TOKEN. Requesting a single API token is expected for a cloud video-processing service and matches the stated purpose.
ℹ
Instruction Scope
SKILL.md contains a curl example calling https://mega-api-prod.nemovideo.ai/api/v1/generate with Authorization: Bearer $NEMO_TOKEN, which is appropriate. The instructions do not tell the agent to read unrelated system files or additional secrets. However, the doc assumes uploading media (batch-upload clips) but doesn't include explicit upload mechanics or data-handling details (where files are stored, retention, or whether uploads are chunked/encrypted) — a privacy consideration rather than a direct coherence issue.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. That is the lowest-risk install model.
ℹ
Credentials
The skill declares a single primary credential (NEMO_TOKEN), which is proportional for a remote API service. Minor metadata inconsistency: the top-level registry metadata lists no required config paths, but the embedded SKILL.md metadata lists a config path (~/.config/nemovideo/). Also SKILL.md metadata shows requires.env: [] while primaryEnv is NEMO_TOKEN — practically acceptable but inconsistent metadata that should be clarified.
✓
Persistence & Privilege
The skill does not request always:true and does not declare actions that persist beyond normal API usage. There is no attempt to alter other skills or system-wide configs.
Assessment
This skill appears to do what it claims: call NemoVideo's API using a single API token (NEMO_TOKEN). Before installing: 1) Verify you trust the endpoint (mega-api-prod.nemovideo.ai) and the skill publisher — the package has no homepage/source listed. 2) Use a scoped or revocable API token (not your master account token) so you can revoke access if needed. 3) Confirm how the service handles uploaded media (storage location, retention, sharing, and whether files are encrypted). 4) Note the small metadata mismatch (SKILL.md references ~/.config/nemovideo/ while registry metadata does not) — ask the author to clarify what local config, if any, will be read or written. If you cannot verify the service/operator or you need strong privacy guarantees for your pet footage, treat the skill as untrusted until those questions are answered.

Like a lobster shell, security has layers — review code before you run it.

latestvk974dsy5gzdacjzntt3t1dhmg183r52c

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🐾 Clawdis
Primary envNEMO_TOKEN

Comments