Image To Video Gemini
v1.0.0Turn a single product photo or landscape image into 1080p animated video clips just by typing what you need. Whether it's converting static images into short...
⭐ 0· 23·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to convert images to short videos using a remote GPU backend and requires a single NEMO_TOKEN credential — this is coherent with its stated purpose. The skill's declared need for a token and session management matches a cloud-rendering workflow.
Instruction Scope
SKILL.md is instruction-only and confines actions to creating sessions, uploading images, sending SSE messages, polling render status, and returning download URLs. These actions match the image→video purpose. It does instruct the agent to (a) look for NEMO_TOKEN in the environment and otherwise obtain an anonymous token by calling the remote auth endpoint, and (b) detect install path to set X-Skill-Platform — both are expected but do require filesystem and network access. There are no instructions to read unrelated environment variables or arbitrary local files beyond the images you upload.
Install Mechanism
No install spec or code files — this is instruction-only, which minimizes disk-write risk. The skill relies on network calls to a third-party API (mega-api-prod.nemovideo.ai) but does not download or install additional packages.
Credentials
Only NEMO_TOKEN is declared as required and that aligns with the API usage. The SKILL.md also documents automatic anonymous-token acquisition when the env var is absent (POST to the provider's auth endpoint). The frontmatter also references a config path (~/.config/nemovideo/) which could imply writing/storing tokens or session state; this conflicts with the registry's earlier 'no required config paths' entry and should be clarified.
Persistence & Privilege
The skill is not marked always:true and does not request elevated system privileges. It can run autonomously (the platform default) and will communicate with an external service, but it does not attempt to modify other skills or system-wide configs in its instructions.
Assessment
This skill appears to do what it says: remote image→video rendering using a single service token. Before installing, consider: (1) Do you trust the external domain (mega-api-prod.nemovideo.ai)? Network requests will send image files and session tokens to that service. (2) If you do not set NEMO_TOKEN, the skill will automatically request an anonymous token from the provider — decide whether you want the agent to obtain and possibly store that token. (3) The skill mentions a config path (~/.config/nemovideo/) in its frontmatter even though the registry said none; ask the author whether tokens/sessions are persisted to disk and where. (4) If privacy is a concern, avoid providing sensitive images or set a per-session token rather than a long-lived environment variable. If you need higher assurance, request the skill author to clarify the config-path behavior and provide a privacy/terms link for the backend service.Like a lobster shell, security has layers — review code before you run it.
latestvk97aw5nxghqsmjdbtxv6s6g7k584yz1q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN