Image To Video Generator Free
v1.0.0Tired of static photos that fail to capture attention on social media or presentations? The image-to-video-generator-free skill transforms your still images...
⭐ 0· 48·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the actions described in SKILL.md: uploading images, creating a session, sending SSE messages, and exporting rendered video. Requiring NEMO_TOKEN is proportional. The skill also reads/writes a small client_id file under ~/.config and probes install paths (~/.clawhub, ~/.cursor) to set an attribution header — these are not strictly required for core functionality but are plausibly used for telemetry/attribution.
Instruction Scope
The instructions are explicit about network calls to the nemovideo.ai API and about reading NEMO_TOKEN. They instruct creating/reading ~/.config/image-to-video-generator-free/client_id and detecting install path for X-Skill-Platform header. No broad filesystem scans or unrelated environment variables are requested, and all outbound requests target the documented API domain.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — nothing is written to disk by an installer beyond the client_id file the skill itself may create at runtime.
Credentials
Only NEMO_TOKEN is required (declared as primary). If absent, the skill requests an anonymous token from the API and stores a client_id locally; this is proportional to obtaining API access. No other credentials or unrelated env vars are requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It may create a small client_id file in the user's home config directory, which is a low-privilege, scoped persistence.
Assessment
This skill appears to do what it says: it uploads images to an external rendering service that requires a NEMO_TOKEN and may create a small ~/.config/image-to-video-generator-free/client_id. Before installing or using it: 1) Verify the external domain (mega-api-prod.nemovideo.ai) and check the service's privacy/terms (no homepage provided in metadata). 2) Avoid uploading sensitive images until you confirm retention and sharing policies. 3) If you don't have a dedicated token, consider using a throwaway or limited-scope token rather than a long-lived credential. 4) Note the skill reads your home config and detects install-paths for attribution headers — if you prefer not to expose that information, run the skill in an isolated account or ask the author to remove that behavior. 5) Because the skill reaches out to an external API, consider reviewing network logs and the created client_id file if you need higher assurance. Overall the skill is internally coherent, but the unknown service origin and lack of a homepage lower confidence — verify the provider before sending private data.Like a lobster shell, security has layers — review code before you run it.
latestvk971ntha2hxrj5ycqc7z1qrdz1840fws
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN