ClawHub

Instagram Photo Video Maker

v1.0.0

Cloud-based instagram-photo-video-maker tool that handles turning photo collections into Instagram reels or stories. Upload JPG, PNG, HEIC, WebP files (up to...

⭐ 0· 55·0 current·0 all-time
by@vcarolxhberger
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is a cloud-based photo→video renderer and requires a NEMO_TOKEN and network access to mega-api-prod.nemovideo.ai, which matches the stated purpose. One inconsistency: the skill's YAML frontmatter declares a config path (~/.config/nemovideo/), but the registry metadata lists no required config paths—this is a small mismatch worth noting but explainable (the skill may optionally read that config dir).
ℹ
Instruction Scope
The SKILL.md instructs the agent to: obtain/use a NEMO_TOKEN, optionally generate an anonymous token via the service API, create sessions, upload user files to the service, and stream SSE responses. It also instructs the agent to read the skill's YAML frontmatter (its own file) and detect install paths (~/.clawhub/, ~/.cursor/) to populate attribution headers. These filesystem reads are limited and related to attribution, but reading home config/install paths is privacy-sensitive—it's within the skill's described behavior but users should be aware uploads and some local path inspection occur.
✓
Install Mechanism
No install spec or code is present (instruction-only), so nothing is written to disk or pulled during install. This is the lowest-risk install model.
✓
Credentials
Only one credential is declared (NEMO_TOKEN) and it is the primaryEnv; the instructions also support creating an anonymous token via the service API if no token is provided. There are no other unrelated credentials or broad environment requirements. The frontmatter's mention of a config path is the only extra I/O request and is plausibly used for optional local config.
✓
Persistence & Privilege
The skill is not always-on (always: false) and uses normal autonomous-invocation defaults. It requires saving session_id and token for session management (expected for this service) but does not request system-wide settings or other skills' configs.
Assessment
This skill appears to do what it says, but it uploads your images and uses an external API (mega-api-prod.nemovideo.ai). Before installing/providing a permanent NEMO_TOKEN: 1) Verify you trust the service owner (no homepage is listed and owner ID is unknown). 2) Prefer using the anonymous token flow (the skill documents it) instead of pasting a long-lived token you care about. 3) Be aware the skill may read small local paths for attribution (~/.config/nemovideo/, install paths) — avoid running it in environments with sensitive local files. 4) Test with non-sensitive/dummy images first and confirm expected behavior, data retention, and billing/credits. 5) If you need stronger assurance, ask the publisher for a homepage/source repo and privacy/security documentation before providing any real tokens or private media.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fsf5gfymtyczxcwcjfyqjkn84m8b9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📸 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments