ClawHub

Ai Legal Video

v1.0.1

Create professional legal videos for law firm marketing, client education, and courtroom presentation using AI-powered production. NemoVideo produces attorne...

⭐ 0· 50·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill advertises AI video production for law firms and its runtime instructions call a NemoVideo API using an API token. Requesting a NEMO_TOKEN and a NemoVideo config path is coherent with that purpose. Note: the registry summary listed 'Required env vars: none' while the skill metadata and SKILL.md use $NEMO_TOKEN — this is an inconsistency in the metadata.
ℹ
Instruction Scope
SKILL.md stays focused on producing attorney/profile/testimonial videos and includes a curl POST to https://mega-api-prod.nemovideo.ai/api/v1/generate with Authorization: Bearer $NEMO_TOKEN. It also advises filming in attorneys' offices and at clients' homes and claims to auto-apply state bar disclaimers. This is within scope for a video service, but raises privacy/consent and compliance considerations (client consent releases, careful handling of PII and health/financial data, and verifying local bar rules).
✓
Install Mechanism
There is no install spec and no code files — this is instruction-only and will not write code to disk. That is the lowest-risk install model.
ℹ
Credentials
The skill sensibly requires a single API credential (NEMO_TOKEN) to call the external NemoVideo API; that is proportionate. However the registry summary omitted required env vars while SKILL.md and the metadata declare NEMO_TOKEN and a config path (~/.config/nemovideo/). The inconsistency should be fixed so users know the credential is required.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. It does reference a user config path (~/.config/nemovideo/) which is reasonable for storing API client settings, but users should confirm what is stored there and protect it.
Assessment
This skill appears to do what it says: call a NemoVideo API to generate legal marketing videos. Before installing, confirm the following: (1) Provide NEMO_TOKEN only if you trust the NemoVideo service and understand the token's scope; rotate or revoke it if compromised. (2) Verify the API endpoint domain (mega-api-prod.nemovideo.ai) and the vendor's legitimacy — the skill metadata shows no homepage. (3) Expect to handle sensitive client data and obtain signed consent/releases for testimonials and case descriptions; review and keep copies of release forms. (4) Confirm state bar advertising rules yourself — do not rely solely on an automated disclaimer. (5) Fix the metadata inconsistency (registry should list NEMO_TOKEN under required env vars) so it's clear what credentials are needed. (6) Protect the ~/.config/nemovideo/ folder (permissions) and avoid pasting your token into untrusted places. If you need higher assurance, ask the publisher for an official homepage, privacy/security documentation, and exact API token scope before using.

Like a lobster shell, security has layers — review code before you run it.

latestvk974apfmgy87rtfp6jbh605rfn83r2zp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚖️ Clawdis
Primary envNEMO_TOKEN

Comments