Ai Video Script Generator
v1.0.0Generate video scripts using AI — write retention-optimized scripts for YouTube, TikTok, Reels, ads, explainers, and any video format. NemoVideo produces com...
⭐ 0· 106·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name and description describe an AI video-script generator; the SKILL.md shows the agent calling an external NemoVideo API with an Authorization: Bearer $NEMO_TOKEN header — that credential is proportionate to the stated purpose. Requesting a single service token (NEMO_TOKEN) is expected for an external API integration.
Instruction Scope
The runtime instructions are instruction-only and demonstrate sending prompts to nemo's API via curl, which is coherent. The SKILL.md does not appear to direct the agent to read unrelated system files. However the metadata lists a config path (~/.config/nemovideo/) that is not referenced in the visible instructions — this is a minor scope mismatch (could imply the agent might look for local config or tokens). The skill will transmit user prompts/content to an external endpoint (expected for this service).
Install Mechanism
No install specification and no code files — instruction-only skills have low disk/write risk. Nothing is downloaded or written during install.
Credentials
The single declared primary credential (NEMO_TOKEN) is reasonable for calling an external NemoVideo API. Minor inconsistency: the top-level registry metadata lists no required env vars while primaryEnv is set to NEMO_TOKEN, and configPaths includes ~/.config/nemovideo/ which may allow reading local config (not strictly necessary if the token is provided via env).
Persistence & Privilege
always is false and the skill is user-invocable/autonomous by default — normal for skills. There is no install step requesting persistent or system-wide changes and no request to modify other skills or system settings.
Assessment
This skill appears to be what it says: it sends your prompts to the NemoVideo API and needs an API token. Before installing: 1) Verify the API hostname (mega-api-prod.nemovideo.ai) and confirm it is the official NemoVideo endpoint; 2) Only provide a NEMO_TOKEN you control — prefer a token with limited scope or a throwaway/test token at first; 3) Confirm why ~/.config/nemovideo/ is listed in metadata — avoid granting the agent permission to read your home config unless necessary; 4) Remember any script text you submit will be sent to the external service, so avoid including secrets or private data in prompts; 5) If the skill's source is unknown, proceed cautiously: test with non-sensitive inputs and review NemoVideo's privacy/retention policy before sending production content.Like a lobster shell, security has layers — review code before you run it.
latestvk97690tyssf394fxpwg32a7f3183sqh2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📝 Clawdis
Primary envNEMO_TOKEN