ClawHub

AI Video Maker - Create Professional Videos with AI Assistant

v2.0.1

Create professional videos with AI — generate marketing videos, product demos, social media clips, training content, and promotional videos from text or imag...

⭐ 0· 67·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a text-to-video service and only requests a single API credential (NEMO_TOKEN) and (in SKILL.md metadata) a config path for NemoVideo — both are consistent with calling an external video-generation API. Note: the registry metadata summary above listed no required config paths, while SKILL.md metadata includes configPaths ("~/.config/nemovideo/"); this minor inconsistency should be verified but does not by itself indicate malicious intent.
✓
Instruction Scope
The SKILL.md contains only user-facing prose and a single curl example that POSTs to https://mega-api-prod.nemovideo.ai/api/v1/generate using the NEMO_TOKEN. It does not instruct reading other environment variables, system files, or unrelated credentials, nor does it direct data to unexpected endpoints.
✓
Install Mechanism
There is no install spec and no code files (instruction-only). That is the lowest-risk model: nothing is written to disk or installed by the skill itself.
✓
Credentials
The skill requires a single service token (NEMO_TOKEN), which is proportionate for a third-party API. Recommend verifying the token's scope/permissions and whether it can be limited or revoked if misused.
✓
Persistence & Privilege
always is false and the skill is user-invocable (normal). The skill can be invoked autonomously by the agent (platform default) — combine this with any long-lived API token only if you trust the skill and the token's scope.
Assessment
This skill appears to be what it says: an instruction-only integration that calls a NemoVideo API using NEMO_TOKEN. Before installing, confirm the token is for the intended NemoVideo account and that it has the minimum necessary permissions; verify the API domain (mega-api-prod.nemovideo.ai) is correct for your vendor; check whether any uploaded content will be stored or used for model training per NemoVideo's terms; note the small inconsistency where SKILL.md metadata includes a config path (~/.config/nemovideo/) but the registry summary did not — confirm whether the skill will read or write that path. If you are uneasy, create a scoped/test token you can revoke after evaluation and test with non-sensitive content.

Like a lobster shell, security has layers — review code before you run it.

latestvk979yfsh54fg0px0mb57mxx4ms83yw1e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments