Ai Reel Creator
v1.0.0Generate Instagram Reels, TikToks, and YouTube Shorts from any input with AI — text prompts, blog posts, product photos, raw clips, audio files, or just an i...
⭐ 0· 65·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe generating short-form videos; runtime instructions call the NemoVideo API and use a bearer token (NEMO_TOKEN) which is coherent with that purpose. Minor inconsistency: the registry lists no required env vars while the skill declares a primaryEnv (NEMO_TOKEN) in metadata.
Instruction Scope
SKILL.md shows a single API target (https://mega-api-prod.nemovideo.ai/api/v1/generate) and example curl usage with $NEMO_TOKEN; it asks for user-provided inputs (text, URLs, photos, audio) which is expected. It does not instruct the agent to read unrelated system files or other credentials.
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk delivery mechanism (nothing written to disk by the skill itself).
Credentials
Requesting a single service token (NEMO_TOKEN) is proportionate for an API-based video generator. However, metadata also lists a config path (~/.config/nemovideo/) while the registry summary earlier said 'Required config paths: none' — this mismatch should be clarified before granting broad access to user config directories.
Persistence & Privilege
always is false and there is no install; the skill does not request permanent presence or elevated platform privileges.
Assessment
This skill appears to do what it says: it sends your provided content to the NemoVideo API and requires a Nemo token (NEMO_TOKEN). Before using it, verify the token's issuer (is it really from NemoVideo / your account on that service?) and limit the token's scope if possible. Confirm the domain (mega-api-prod.nemovideo.ai) is legitimate for the vendor. Ask the skill author or vendor how uploaded content is stored, processed, and retained (privacy/data retention), and whether the service will reuse or train on your content. Also clarify the metadata inconsistencies: the skill declares a primaryEnv (NEMO_TOKEN) but registry shows no required env vars, and SKILL.md metadata references ~/.config/nemovideo/ while the registry earlier reported no required config paths — these could be harmless bookkeeping errors but are worth confirming before granting access to tokens or config directories.Like a lobster shell, security has layers — review code before you run it.
latestvk976h9j71rdfapc4gkg9s1xs5183ravm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Primary envNEMO_TOKEN
