ClawHub

Sora Ai Video Maker

v1.0.0

content creators generate text prompts into AI generated videos using this skill. Accepts MP4, MOV, WebM, GIF up to 500MB, renders on cloud GPUs at 1080p, an...

⭐ 0· 56·0 current·0 all-time
by@susan4731-wilfordf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, declared credential (NEMO_TOKEN), and the SKILL.md API endpoints all align with a cloud video render service. The skill requires only a service token and performs uploads, SSE, and render requests consistent with the stated goal.
ℹ
Instruction Scope
Instructions tell the agent to (a) obtain or use NEMO_TOKEN, (b) create sessions, (c) upload user media, (d) stream/poll SSE endpoints and return download URLs. These are appropriate for the stated function. The skill also instructs the agent to read the skill's frontmatter and detect install path to populate attribution headers; that requires reading skill metadata / runtime install path (reasonable but broader than purely 'generate video'). No instructions request unrelated files, system secrets, or arbitrary local data.
✓
Install Mechanism
There is no install spec and no code files — this is an instruction-only skill. That is the lowest-risk install profile (nothing is written to disk by an installer).
ℹ
Credentials
Only one credential (NEMO_TOKEN) is required and is the primaryEnv; this is proportionate for a cloud API. The skill can also request/generate an anonymous token itself via the provider's anonymous-token endpoint (so it can operate without a pre-set token). One minor inconsistency: the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/) while the registry metadata shown earlier listed no required config paths — the skill may expect to read/write a local config directory for token/session caching, which is plausible but worth verifying.
✓
Persistence & Privilege
always:false and normal model invocation are used (no forced global inclusion). The skill instructs storing session_id and may cache tokens/sessions locally (consistent with services that resume jobs), but it does not request elevated or cross-skill persistence beyond its own config area.
Assessment
This skill appears to do what it says, but before installing: (1) understand that your uploaded media will be sent to https://mega-api-prod.nemovideo.ai for processing — ensure you are comfortable with that external upload and any privacy/billing implications; (2) the skill will use or create a NEMO_TOKEN (it can auto-generate an anonymous token valid 7 days) and may cache session/token data in a local config path (~/.config/nemovideo/) — confirm whether you want tokens stored locally; (3) registry metadata and the SKILL.md disagree about config path requirements — ask the publisher which local paths will be used and for what purpose; (4) if you prefer, provide your own NEMO_TOKEN rather than allowing the skill to auto-generate one; (5) no installers or other credentials are requested, which reduces risk, but always review the provider domain and privacy policy before uploading sensitive content.

Like a lobster shell, security has layers — review code before you run it.

latestvk97276wcae7bqkdw08rn6yxf9s84kvp4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments