Animaker
v1.0.0create images, text, assets into animated MP4 videos with this skill. Works with MP4, MOV, GIF, WebM files up to 200MB. marketers, educators, content creator...
⭐ 0· 45·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (create animated videos) align with the endpoints, workflows, and formats described in SKILL.md. The single required credential (NEMO_TOKEN) is appropriate for an API-backed render service. One minor inconsistency: the registry header said no config paths, but the SKILL.md frontmatter lists a config path (~/.config/nemovideo/). This looks like metadata drift rather than malicious mismatch.
Instruction Scope
The runtime instructions stay within the video-rendering domain: session creation, SSE chat, upload, render, polling. The skill will look for NEMO_TOKEN and, if absent, request an anonymous token from the service (POST to /api/auth/anonymous-token). It also instructs reading this file's YAML frontmatter and optionally detecting an install path to set an attribution header — that implies minimal local reads (this SKILL.md or install path detection) but does not direct access to unrelated system files or other credentials. Be aware: examining install path to set X-Skill-Platform may require checking known paths on disk if the agent implements it.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk or downloaded by the skill itself in the provided instructions, so install risk is low.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv). The SKILL.md will obtain an anonymous token if none is provided, so the skill doesn't need broad credentials. There is a minor metadata mismatch: registry requirements reported no config paths, while the SKILL.md frontmatter declares ~/.config/nemovideo/ — this should be clarified but is not disproportionate.
Persistence & Privilege
always:false and normal model invocation are used. The skill does not request persistent installation, system-wide config changes, or access to other skills' credentials. No elevated privileges are requested.
Assessment
This skill is an instruction-only connector to a third-party video-rendering API and appears internally consistent. Before installing or using it: (1) Decide whether you trust the remote domain (mega-api-prod.nemovideo.ai) to receive any media you upload — do not upload private or sensitive content you wouldn’t want sent to an external service. (2) You can allow the skill to use its anonymous token flow instead of supplying a long-lived NEMO_TOKEN if you prefer ephemeral access. (3) Note the small metadata mismatch about a config path in the SKILL.md frontmatter — ask the publisher for source/homepage or README if you need fuller provenance. (4) Because the skill performs network uploads and downloads, monitor network activity and audit any tokens you provide. If you require a higher trust level, request the skill’s source code or an official homepage before enabling it.Like a lobster shell, security has layers — review code before you run it.
latestvk978z4sy2rhqtmzxdp0xhmdg8s84rxy9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN