ClawHub

Tiktok Photo Video Maker

v1.0.0

Cloud-based tiktok-photo-video-maker tool that handles turning photo collections into short TikTok videos. Upload JPG, PNG, HEIC, WebP files (up to 200MB), d...

⭐ 0· 56·0 current·0 all-time
by@susan4731-wilfordf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
Name and description describe a cloud photo→video service. The skill only requests a single NEMO_TOKEN credential and directs network calls to a nemovideo.ai backend, which is coherent for a cloud-rendering service. Minor mismatch: the registry metadata listed no required config paths, but the SKILL.md frontmatter (metadata) references a config path (~/.config/nemovideo/).
ℹ
Instruction Scope
SKILL.md instructs the agent to check NEMO_TOKEN, optionally obtain an anonymous token via POST to https://mega-api-prod.nemovideo.ai, create sessions, upload user files (multipart or URL), stream SSE, poll render status, and return download URLs. These actions are appropriate for a cloud render tool. Things to note: it reads environment variables and may detect install/config paths (~/.clawhub, ~/.cursor/skills/, ~/.config/nemovideo/), and will perform network requests to an external API. The instructions explicitly say not to expose tokens, which is appropriate.
✓
Install Mechanism
There is no install spec and no code files (instruction-only). That minimizes on-disk risk; the skill operates via API calls only.
ℹ
Credentials
Only one credential is required: NEMO_TOKEN (primaryEnv). That aligns with the described backend. The skill will create an anonymous token automatically if NEMO_TOKEN is absent. No unrelated secrets or multiple credentials are requested. However, the metadata's configPaths entry (~/.config/nemovideo/) appears in the frontmatter but the registry reported 'Required config paths: none' — this discrepancy should be clarified.
✓
Persistence & Privilege
The skill does not request always:true and has no install behavior; session tokens are used at runtime and the skill appears to maintain only session-level state. It does not request system-wide configuration changes or cross-skill modifications.
Assessment
This skill appears to be what it says: a cloud service that uploads your images and returns a rendered TikTok-style MP4. Before installing, consider: (1) It will make network requests to mega-api-prod.nemovideo.ai and may automatically obtain an anonymous token if you don't supply NEMO_TOKEN — verify you trust that domain and service. (2) Uploaded images and audio are sent to a third party — review privacy and terms for sensitive content. (3) The SKILL.md references a config path (~/.config/nemovideo/) but the registry said none — ask the publisher which config is actually used. (4) Only provide NEMO_TOKEN if you trust it; do not supply other unrelated credentials. If you need higher assurance, ask the publisher for a homepage or source repository and confirm the API endpoints and token handling before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk975cmt2eq1sjzgz9cm4nf1rhn84m6ef

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📸 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments