ClawHub

Ai Story Video Maker

v1.0.0

Create storytelling videos with AI — turn stories, narratives, personal experiences, fictional tales, and brand stories into cinematic videos with AI-generat...

⭐ 0· 63·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is a text-to-video/storytelling service and declares a primary credential (NEMO_TOKEN) and a NemoVideo API endpoint in the runtime instructions. Asking for an API token to call an external video-generation service is consistent with the described purpose.
✓
Instruction Scope
The SKILL.md instructions (example curl call) show the agent posting story text to the nemovideo API using the Authorization: Bearer $NEMO_TOKEN header. The instructions do not request access to unrelated files, other environment variables, or unexpected external endpoints beyond the stated API. (Note: the provided SKILL.md was truncated in the sample, but the visible instructions remain focused on the external API call.)
✓
Install Mechanism
No install spec or code files are present; this is an instruction-only skill. That minimizes on-disk risk and is consistent with a simple API-integration skill.
ℹ
Credentials
The skill declares a primaryEnv of NEMO_TOKEN (appropriate) and a config path (~/.config/nemovideo/) which is plausible for storing credentials. However, the registry metadata shows required env vars as an empty list while primaryEnv is set — a small metadata inconsistency. Otherwise, the only credential referenced in the visible instructions is NEMO_TOKEN, which is proportional to the functionality.
✓
Persistence & Privilege
The skill does not request always:true and contains no install behavior that modifies other skills or system-wide settings. Autonomous invocation is allowed (default) but not combined with broad privileges here.
Assessment
This skill appears to do what it says: it sends your story text to an external NemoVideo API and requires a NEMO_TOKEN. Before installing, confirm the token's source and scope (avoid reusing high-privilege tokens), review NemoVideo's privacy/billing terms (your story text will be transmitted to their servers), and test with non-sensitive example content first. Also note a minor metadata mismatch: primaryEnv is set but the required env list is empty — verify which environment variable the agent actually needs and where it will be stored (~/.config/nemovideo/). If the provider/source is unknown or untrusted, be cautious about sending proprietary or private narratives.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cp27savncxhxq697v49fhrn83spnt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📖 Clawdis
Primary envNEMO_TOKEN

Comments