ClawHub

Text To Video Maker Free

v1.0.0

Type a script, paste a blog post, or drop a few lines of text — and watch it transform into a shareable video in seconds. This text-to-video-maker-free skill...

⭐ 0· 36·0 current·0 all-time
by@tk8544-b
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is a text-to-video front end and it only declares one credential (NEMO_TOKEN) which is proportional to calling a third‑party video API. Requesting an API token and describing session/ upload/ export endpoints is coherent. Note: the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/) while the registry metadata lists no required config paths — this is a minor inconsistency.
ℹ
Instruction Scope
Instructions tell the agent to POST text/files to an external domain (mega-api-prod.nemovideo.ai), create a session, stream SSE responses, and upload files; that is expected for the stated purpose. The runtime also instructs the agent to read the skill's YAML frontmatter and detect install path (~/.clawhub, ~/.cursor/skills/) to set an X-Skill-Platform header — this requires the agent to inspect filesystem/install location, which is not strictly necessary for core functionality and should be noted. All user content (text, uploaded files) will be transmitted to the external service.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing will be written to disk by an installer. That is the lowest-risk install model.
ℹ
Credentials
The skill requests a single primary credential (NEMO_TOKEN), which matches a cloud API usage pattern. It will generate an anonymous token via the service if NEMO_TOKEN is absent. However, the SKILL.md metadata mentions a config path (~/.config/nemovideo/) that is not declared in the registry's required config paths — a small mismatch. No other unrelated secrets are requested.
✓
Persistence & Privilege
always:false and no install/agent-wide modifications are requested. The skill does ask the agent to detect install path and read its own frontmatter for attribution headers, but it does not request persistent or elevated system privileges.
Assessment
This skill will send your text and any files you upload to an external service at mega-api-prod.nemovideo.ai and will use either your provided NEMO_TOKEN or an anonymous token obtained from that service. Before installing: (1) Only use if you trust the external API host — user content will leave your environment. (2) Do not supply sensitive secrets or private data to the skill; consider using a limited/dedicated token. (3) Note the small metadata mismatch (the SKILL.md mentions ~/.config/nemovideo/ while the registry shows none) and the skill will attempt to detect its install path to set attribution headers — if you are uncomfortable with filesystem inspection, decline. (4) Because the skill source/homepage is unknown, verify the service/domain and consider testing with non-sensitive content first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97bhjgw3swmetvyt308hd3ar9843nqy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments