Image To Video Generator
v1.0.0Turn static images into dynamic, eye-catching videos in seconds with this image-to-video-generator skill. Upload a single photo or a series of images and wat...
⭐ 0· 41·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill requires a single credential (NEMO_TOKEN) and describes API endpoints for video synthesis hosted at mega-api-prod.nemovideo.ai — this matches an image->video cloud service. One minor oddity: it instructs determining an installation platform by checking common install paths (e.g., ~/.clawhub/, ~/.cursor/skills/). That platform-detection is not strictly necessary for core functionality and implies the agent may inspect a small set of user home paths to set an X-Skill-Platform header.
Instruction Scope
SKILL.md instructs the agent to upload user images (multipart or URL), create/persist a session_id, poll render endpoints, and (if no token present) request an anonymous token from the service. These actions are expected for a cloud rendering skill. The only scope concern is the earlier-mentioned guidance to detect install paths in the user's home directory for header attribution; this can lead to reading those specific paths and is unnecessary for the core upload/render flow.
Install Mechanism
Instruction-only skill with no install spec or code files — nothing is downloaded or written during install, which minimizes filesystem/remote-code risk.
Credentials
Only NEMO_TOKEN is required (declared primary credential). The SKILL.md also defines a safe fallback: obtaining a short-lived anonymous token via the service API. No unrelated secrets or multiple credentials are requested.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide changes or other skills' configuration. It asks to save session state (session_id/token) for the service flow, which is normal for an API-backed skill.
Assessment
This skill appears to do what it says: it uploads your images to a cloud API and returns rendered videos. Before installing, consider: 1) Any images you upload will be sent to mega-api-prod.nemovideo.ai — review privacy/terms for sensitive content. 2) Provide a dedicated NEMO_TOKEN (or use the anonymous token flow) rather than reusing high-privilege credentials. 3) The skill may check a couple of install paths in your home directory to set an attribution header — if you prefer, run it in an environment where those paths are absent or verify the agent's runtime won't expose other files. 4) Monitor credit/billing usage (the skill exposes credit-balance and render endpoints). If you need further assurance, request the skill author or publisher to provide a source/homepage and a signed privacy/data-handling statement.Like a lobster shell, security has layers — review code before you run it.
latestvk978ptpvmrx53bnk2ffasb96g5841jx8
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN