ClawHub

Video Maker Online Free

v1.0.0

Turn your photos, clips, and ideas into polished videos without downloading a single app. This video-maker-online-free skill helps creators, small businesses...

⭐ 0· 47·0 current·0 all-time
by@vcarolxhberger
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is a cloud video creation assistant and requires a NEMO_TOKEN and calls endpoints under mega-api-prod.nemovideo.ai — these align with the described purpose. Minor inconsistency: the top-level registry summary listed no required config paths, but the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/). That mismatch should be clarified but does not by itself contradict purpose.
ℹ
Instruction Scope
Runtime instructions are explicit: read NEMO_TOKEN from env (or obtain an anonymous token via POST), create a server session, upload user media (file path or URL), and request renders. The skill will ask the agent to read the environment and detect the install path for attribution headers — expected for attribution but worth noting. It does not instruct the agent to scan unrelated files or exfiltrate arbitrary system data beyond media uploads and token usage.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest-risk install surface. Nothing is downloaded or written by an installer in the skill package itself.
ℹ
Credentials
Only NEMO_TOKEN is declared as required (primary credential) which is appropriate for a cloud API client. The SKILL.md will generate an anonymous token if none is present. The frontmatter's request for ~/.config/nemovideo/ suggests the skill may read or store config there (reasonable for saving tokens), but the registry metadata earlier omitted config paths — this inconsistency should be clarified. No other unrelated secrets are requested.
✓
Persistence & Privilege
always:false and no install-time persistent privileged actions are requested. The skill does not request to modify other skills or system-wide agent settings and uses only standard runtime interactions (HTTP, file uploads) consistent with its purpose.
Assessment
This skill appears to do what it says: it uses a NEMO_TOKEN to call nemovideo.ai and upload media for cloud rendering. Before installing, consider: 1) The publisher/source is unknown — verify the origin or prefer a known provider if you need strong trust. 2) The skill will upload your media to mega-api-prod.nemovideo.ai — do not upload sensitive or private files unless you trust that service and its privacy policy. 3) The skill may read or store a token under ~/.config/nemovideo/ and will look for NEMO_TOKEN in your environment; if you have a NEMO_TOKEN in your environment from another tool, be aware it will be used by this skill. 4) There is a minor metadata mismatch (registry said no config paths but the skill frontmatter lists a config path) — ask the publisher to clarify. If you are uncomfortable with uploading files or granting a token to an unknown service, do not enable the skill or create a disposable/anonymous token first.

Like a lobster shell, security has layers — review code before you run it.

latestvk975eaahjp63qb1ra3t0m9f1cs842h2s

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments