Video Maker Generator Free
v1.0.0Skip the learning curve of professional editing software. Describe what you want — turn these images into a 30-second promo video with music and text — and g...
⭐ 0· 53·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (cloud video creation) align with the declared credential (NEMO_TOKEN) and with the SKILL.md which documents API endpoints for uploads, SSE, rendering, and credits. No unrelated credentials or binaries are requested.
Instruction Scope
Instructions instruct the agent to upload user media and exchange tokens/sessions with mega-api-prod.nemovideo.ai — which is expected for this purpose. One minor inconsistency: the frontmatter metadata lists a config path (~/.config/nemovideo/) but the SKILL.md text does not clearly explain what is read from or written to that path (it does ask to 'store' session_id). Clarify where tokens/session IDs are persisted and why.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. No downloads or third-party package installs are requested.
Credentials
Only NEMO_TOKEN is required and the SKILL.md includes fallback to obtain an anonymous token if not present, which is proportionate. The declared config path could allow storing session/token data on disk — reasonable for reconnects but worth noting because it gives the skill filesystem persistence.
Persistence & Privilege
always:false (no forced global inclusion). The skill declares a config path (~/.config/nemovideo/) implying it may store session info; this persistence is reasonable for the service but should be made explicit. The skill does not request elevated system privileges or other skills' configs.
Assessment
This skill appears to do what it says: it uploads your images/video to a remote rendering service and uses a single service token (NEMO_TOKEN). Before installing or using it, consider these points:
- The skill will make network requests to mega-api-prod.nemovideo.ai and will upload any media you provide — do not send sensitive or confidential footage unless you trust that domain and its privacy policy.
- If you do not supply NEMO_TOKEN, the skill will obtain an anonymous token by contacting the API; that creates an external session tied to a generated client ID. Decide whether you prefer to create and supply a token yourself.
- The metadata mentions a local config path (~/.config/nemovideo/) where session data or tokens may be stored; ask the author or inspect runtime storage behavior if you need session tokens to remain ephemeral.
- There is no install script or embedded code to review (instruction-only), so the main risk is data you upload and the trustworthiness of the remote service. If you need higher assurance, request the skill author or publisher identity, a privacy policy, or an official homepage before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk976155b6x22hck3qgmmm0ks6d84se2r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN