Whiteboard Animation Video
v1.0.1Describe your concept and NemoVideo creates the whiteboard animation. Complex ideas made simple — economics, science, history, product explainers — narrate t...
⭐ 0· 54·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to create whiteboard animation videos and the instructions show it connecting to NemoVideo's backend, creating sessions, and submitting video generation jobs — these requirements are consistent with the stated purpose.
Instruction Scope
Runtime instructions direct the agent to greet the user, check NEMO_TOKEN, read/write ~/.config/nemovideo/client_id, call an anonymous-token endpoint and create sessions. These actions are within scope for a remote video-generation integration, but the SKILL.md does not explicitly document all env vars/variables it will read (e.g., NEMO_TOKEN, $API) and the $API variable is ambiguous.
Install Mechanism
This is an instruction-only skill with no install spec or code files — no software is written to disk beyond the client_id file the skill itself saves, which is lower risk than arbitrary downloads or package installs.
Credentials
No required env vars are declared in the registry, yet the instructions read NEMO_TOKEN if present and may store a session token in that variable for the session; the skill also asks to store a client_id under ~/.config/nemovideo. These credentials/config writes are plausible for a service integration but should be disclosed to the user. Example API usage also shows an Authorization: Bearer YOUR_API_KEY header (not declared), which could confuse users about whether an API key is required.
Persistence & Privilege
The skill does not request always:true and doesn't install persistent binaries. It will create a single config file (~/.config/nemovideo/client_id) for a persistent client identifier, which is a limited and plausible persistence intended for session identification.
Assessment
This skill appears to do what it claims: it will contact NemoVideo's API to create videos and will upload content you provide. Before installing/use, consider: (1) the skill will read NEMO_TOKEN (if set) and may create ~/.config/nemovideo/client_id in your home directory — check that you’re okay with a client ID file being written; (2) any videos, scripts, or sensitive content you send will be transmitted to mega-api-prod.nemovideo.ai (verify you trust that domain and the company policy); (3) the SKILL.md shows example use of an API key but doesn't declare it as required — ask the provider whether you must supply an API key or whether anonymous tokens suffice; (4) confirm what data NemoVideo retains and their privacy/retention policy if you will upload proprietary or personal content. If any of these are a concern, do not proceed until you get clarification from the skill author or NemoVideo.Like a lobster shell, security has layers — review code before you run it.
latestvk97ftwdv128j4pwzdrzyecjkzd83ps8z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.