Video Maker From Photos
v1.0.0Turn ten vacation photos from a beach trip into 1080p compiled photo video just by typing what you need. Whether it's turning photo collections into shareabl...
⭐ 0· 52·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description map to the actions in SKILL.md: creating server-side videos from uploaded photos. The only required secret is NEMO_TOKEN which is appropriate. Minor inconsistency: the registry summary listed no required config paths, but the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/). That path is not referenced elsewhere in the instructions, so clarify whether the skill needs filesystem access to that config directory.
Instruction Scope
Instructions stay within the service integration: obtain/use NEMO_TOKEN, create a session, upload files, stream SSE events, and poll renders. They do ask the agent to read this file's YAML frontmatter at runtime and to detect install paths (~/.clawhub, ~/.cursor/skills/) to populate attribution headers — this requires limited filesystem access. The skill also expects file uploads from the user (multipart or file paths), which legitimately needs access to the user's files. No instructions request unrelated system files, shell history, or other credentials.
Install Mechanism
No install spec and no code files — the skill is instruction-only, so nothing is downloaded or written to disk by an installer.
Credentials
Only one environment variable is requested (NEMO_TOKEN) and it's the primary credential used to call the described API. The skill also describes a flow to obtain an anonymous token if none is present, which is consistent with its function. No unrelated secrets are requested.
Persistence & Privilege
always:false and no instructions to persist system-wide settings or modify other skills. Autonomous invocation is allowed (platform default) but the skill does not request elevated or persistent privileges.
Assessment
This skill appears to do what it says: it uploads photos to mega-api-prod.nemovideo.ai and creates server-side video renders. Before installing, consider: (1) It will send your image files to an external service — do not upload sensitive images you don't want transmitted. (2) The skill may read its own SKILL.md and detect installation paths (it may check locations like ~/.clawhub or ~/.cursor/skills/) to populate attribution headers; if you are uncomfortable with the agent accessing those paths, avoid installing. (3) Confirm whether the documented config path (~/.config/nemovideo/) is actually needed, since the registry summary omitted it; if it is required, that could allow reading a local Nemovideo config. (4) NEMO_TOKEN is the only secret required — only provide a token you trust. Overall this is internally coherent, but review the data you plan to upload and the token you provide.Like a lobster shell, security has layers — review code before you run it.
latestvk97fm0s6f0bet0357b70qr6z6x84q3yz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN