Video Editing Ai Image
v1.0.0convert images or video into animated video clips with this skill. Works with JPG, PNG, MP4, MOV files up to 200MB. social media creators and marketers use i...
⭐ 0· 17·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill asks only for a single service token (NEMO_TOKEN) which matches the stated cloud-rendering purpose. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata indicated no required config paths — this is likely benign but worth confirming.
Instruction Scope
Instructions are focused on the external API: create/obtain a token, create a session, upload files, run SSE for edits, and export. The agent is explicitly instructed to upload user-provided media to the nemovideo.ai service (expected). Small scope creep: headers require an X-Skill-Platform value auto-detected from the install path, which may cause the agent to inspect runtime/install metadata; SKILL.md also instructs the agent to persist session_id and to set NEMO_TOKEN if not present.
Install Mechanism
This is instruction-only with no install spec or downloaded code, which lowers installation risk.
Credentials
Only a single credential (NEMO_TOKEN) is required and is necessary to authenticate to the stated API. The frontmatter's configPaths entry (~/.config/nemovideo/) is not justified elsewhere and is inconsistent with registry metadata; clarify whether the skill will read or write that path.
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or global agent configuration. It does ask to store session_id and possibly set NEMO_TOKEN locally (normal for a session-based integration).
Assessment
This skill will upload any images/videos you send to an external service at mega-api-prod.nemovideo.ai and requires a NEMO_TOKEN credential. Before installing: (1) confirm you are comfortable sending media (including potentially sensitive images) to that external domain and review its privacy/terms; (2) verify whether the skill will read or write ~/.config/nemovideo/ (SKILL.md mentions it in frontmatter but registry metadata did not); (3) prefer using a scoped or temporary token (the skill supports obtaining an anonymous short-lived token) when testing with private or sensitive data; (4) test with non-sensitive files first to confirm behavior and outputs; and (5) if you need stronger assurance, ask the skill author for a privacy/retention policy and for confirmation about what metadata the agent will include in the X-Skill-Platform header (the header may require the agent to inspect its runtime/install path).Like a lobster shell, security has layers — review code before you run it.
latestvk97fjymtk5vvahcjqycxz1w14n84s4bv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
