Image To Video Comfyui
v1.0.0Skip the learning curve of professional editing software. Describe what you want — animate this image into a 5-second video clip using ComfyUI workflow — and...
⭐ 0· 43·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description claim remote ComfyUI-based video generation; the skill only requires a single service credential (NEMO_TOKEN) and its API endpoints are all for the stated rendering backend. Requiring a token is proportionate to the described functionality.
Instruction Scope
SKILL.md instructs the agent to upload user images, create/check sessions, poll render jobs, and obtain an anonymous token automatically if NEMO_TOKEN is not set. Those actions are within the stated purpose. Note: the skill also tells the agent to 'detect install path' to set an X-Skill-Platform header and to keep token values hidden from the user — the install-path detection implies the agent may check well-known paths (~/.clawhub/, ~/.cursor/skills/) which touches the local filesystem beyond just reading user-supplied image file paths.
Install Mechanism
No install spec or third-party downloads — instruction-only skill. Nothing is written to disk by an installer, so install risk is low.
Credentials
The only declared required environment variable is NEMO_TOKEN which matches the API usage. However, the SKILL.md frontmatter lists a configPaths entry (~/.config/nemovideo/) while the registry metadata summary provided earlier said no required config paths — this is an inconsistency worth clarifying. The skill also instructs creating an anonymous token automatically if no NEMO_TOKEN is present, which means it will call the external API and retain session_id/token state for subsequent calls.
Persistence & Privilege
always:false and no instructions to modify other skills or system-wide settings. The skill asks the agent to store session_id/token for the session, which is expected for an API-backed workflow.
Assessment
This skill appears to do what it says: it uploads images to a remote GPU-backed service (mega-api-prod.nemovideo.ai) and returns rendered videos, requiring a NEMO_TOKEN. Before installing, consider: (1) privacy — your images will be sent to an external service (don’t upload sensitive content unless you trust the provider); (2) token handling — the skill will create and use an anonymous token for you if none is provided (valid 7 days); (3) minor metadata mismatch — SKILL.md references a config path (~/.config/nemovideo/) that wasn't listed in the registry metadata, so ask the publisher whether the skill will read/write that path; (4) verify you trust the external domain (mega-api-prod.nemovideo.ai) because it will receive your files and generate tokens. If you need higher assurance, request an explicit privacy policy or service homepage, and prefer providing your own NEMO_TOKEN rather than letting the skill create one automatically.Like a lobster shell, security has layers — review code before you run it.
latestvk97dn9yx1y42kep0g8zbjvtr9984s9pr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN