ClawHub

Easy Ai Video Generator

v1.0.0

Cloud-based easy-ai-video-generator tool that handles generating polished videos from text or images without manual editing. Upload MP4, MOV, JPG, PNG files...

⭐ 0· 61·0 current·0 all-time
by@vcarolxhberger
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (cloud video generation) align with the runtime instructions: creating sessions, uploading media, SSE chat, and exporting renders to an external nemovideo.ai backend. The only required credential is NEMO_TOKEN which is appropriate for a cloud API.
ℹ
Instruction Scope
SKILL.md stays within the video-generation flow (token check/create, session creation, upload, SSE, export/poll). Two items to note: (1) it instructs checking for NEMO_TOKEN in the environment and using it if present (expected), and (2) it describes deriving X-Skill-Platform by inspecting install paths (~/.clawhub/, ~/.cursor/skills/), and the metadata declares a config path (~/.config/nemovideo/) — the instructions do not explicitly state what will be read from that config path but the presence of the path suggests the skill may look for saved tokens/config there. This is minor but worth being explicit about.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing is written to disk or downloaded by the skill itself according to the provided files.
ℹ
Credentials
Only NEMO_TOKEN is required (declared as primary). That is proportionate to a cloud video-generation service. Caveat: because the skill will use any NEMO_TOKEN found in the environment (or potentially look in ~/.config/nemovideo/ per metadata), a pre-existing token in your environment would be used to charge or access your account — confirm that any NEMO_TOKEN present is intended for this service.
✓
Persistence & Privilege
The skill is not force-enabled (always: false) and has no install actions or hooks that request persistent privileges or modify other skills/config. Autonomous invocation is allowed (default) but this is normal for skills and not an additional red flag here.
Assessment
This skill appears to do what it says: it calls nemovideo.ai endpoints to create sessions, upload media, and render videos. Before installing or invoking: 1) Check your environment for a NEMO_TOKEN — if you have one, the skill will use it and may charge or consume credits on that account; remove or rotate it if you don't want that. 2) Be aware the skill will call https://mega-api-prod.nemovideo.ai and may create anonymous tokens if none exist (these expire in 7 days). 3) The frontmatter mentions a config path (~/.config/nemovideo/) and the instructions derive a platform header by probing common install directories — if you want to avoid any filesystem checks, run the skill in a restricted/sandboxed environment or remove NEMO_TOKEN from your environment. 4) Avoid uploading sensitive or private video/audio assets unless you trust the service and its privacy terms.

Like a lobster shell, security has layers — review code before you run it.

latestvk977eyy6wx4nvcs3vxdtbhn5gn84jtrq

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments