Image To Video Jiggle
v1.0.0Turn a single portrait photo or product image into 1080p looping animated clips just by typing what you need. Whether it's turning static photos into jigglin...
⭐ 0· 40·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description match the actions described in SKILL.md (upload image, create session, request render, download MP4). Required credential (NEMO_TOKEN) is appropriate for a cloud API. Minor inconsistency: SKILL.md declares a config path (~/.config/nemovideo/) in its frontmatter, but the registry metadata lists no required config paths.
Instruction Scope
The instructions remain focused on the image-to-video flow (session creation, SSE for edits, upload endpoint, render endpoint). They explicitly instruct generating an anonymous token if no NEMO_TOKEN is present and uploading user files to the remote service — this is expected but important to note because user images are sent to an external API. The SKILL.md does not mention data retention, privacy, or allowed content.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest filesystem/execution risk. All network activity is via the described HTTPS API endpoints.
Credentials
Only NEMO_TOKEN is requested as an environment credential, which is proportionate. The SKILL.md frontmatter also lists a config path (~/.config/nemovideo/) — registry metadata omitted that, which is an inconsistency to be aware of. The skill will also create/hold a session_id and may call an anonymous-token endpoint on your behalf if no token exists.
Persistence & Privilege
The skill does not request always:true or system-wide changes. It requires normal session state for rendering but does not ask to modify other skills or system-wide configs.
Assessment
This skill appears to do what it says: it uploads images to nemovideo's cloud API, creates a session, renders a looping MP4, and returns a download URL. Before installing: 1) Be aware that any image you upload will be sent to https://mega-api-prod.nemovideo.ai — review the service's privacy/retention policy or avoid uploading sensitive images. 2) NEMO_TOKEN is the main credential: only provide a scoped or disposable token if possible; the skill will also generate an anonymous token if none is provided. 3) Note the small metadata mismatch (SKILL.md mentions a config path that registry metadata does not); this is likely benign but worth verifying. 4) The skill is instruction-only (no local install), so its primary risk is remote data handling — verify the domain and prefer temporary tokens or explicit consent for uploads. If you need higher assurance, ask the publisher for a homepage/privacy policy or test with non-sensitive images and a disposable token first.Like a lobster shell, security has layers — review code before you run it.
latestvk975d5vyr436y75rvh6wdce6f584sp0c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN