Video Creation Ai
v1.0.0AI-powered video production from concept to final export — NemoVideo handles every stage of video creation: scripting, visual generation, voiceover recording...
⭐ 0· 53·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill describes an AI video production pipeline and requests a single primary credential (NEMO_TOKEN) and a NemoVideo config path — both are coherent with a cloud video service. No unrelated binaries or unrelated cloud credentials are requested.
Instruction Scope
The SKILL.md focuses on concept, production stages, and user workflows (text-to-video, upload footage, etc.). This implies the agent will upload user media to an external service and use the NEMO_TOKEN to authenticate. The file does not (in the provided excerpts) instruct the agent to read unrelated system files, but it does reference a user config directory (~/.config/nemovideo/) which may be read for credentials or settings. The skill does not document privacy, retention, or where media is transmitted — ask the developer for explicit data handling details and consent prompts before sending private media.
Install Mechanism
No install spec and no bundled code — the skill is instruction-only and does not write to disk or fetch external installers. This is the lowest-risk install profile.
Credentials
Only a single primary credential (NEMO_TOKEN) is declared which is proportional for a third‑party API. Minor inconsistency: requires.env is empty while primaryEnv is set; metadata also lists a config path (~/.config/nemovideo/) which could expose other local config files. Confirm that the skill will only use NEMO_TOKEN and will not attempt to read other credentials from the config directory.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent platform-wide presence or to modify other skills. Autonomous invocation is allowed (platform default) but not on its own a concern here.
Assessment
This skill appears to do what it says: it will likely upload media and use a NEMO_TOKEN to call a NemoVideo service. Before installing, verify: (1) where and how your uploaded media is stored and how long it is retained, (2) the exact scope and permissions of NEMO_TOKEN (use a least-privilege or ephemeral token if possible), (3) whether the service shares data with third parties or uses external models, and (4) that the skill will not read other files from ~/.config or other paths. If you plan to upload sensitive footage, ask the provider for a privacy/data-retention policy or test with non-sensitive data first. Finally, confirm the source/trustworthiness of the skill (owner and homepage are unknown).Like a lobster shell, security has layers — review code before you run it.
latestvk97ab612ges1r687adszc0wrc983szbm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
Primary envNEMO_TOKEN