ClawHub

Openart Ai

v1.0.0

generate images or prompts into AI-generated videos with this openart-ai skill. Works with PNG, JPG, WebP, MP4 files up to 200MB. digital artists and content...

⭐ 0· 57·0 current·0 all-time
by@vynbosserman65
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (AI art/video generation) matches the runtime instructions which call a nemovideo.ai rendering API. The single declared credential NEMO_TOKEN is appropriate for an API-backed service.
ℹ
Instruction Scope
Instructions stay within the rendering workflow (session creation, SSE for streaming, upload, export, polling). They ask the agent to store session_id and use Authorization headers but do not instruct reading arbitrary system files. Minor scope ambiguity: the YAML frontmatter references a config path (~/.config/nemovideo/) and derives an X-Skill-Platform from install paths, but the registry metadata showed no required config paths — it's unclear whether the skill expects to read/write that directory.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is downloaded or written to disk by the skill itself — lowest install risk.
ℹ
Credentials
Only one credential (NEMO_TOKEN) is required, which is proportionate. The skill also documents an anonymous-token flow (POST to /api/auth/anonymous-token) to obtain a short-lived token if none provided — acceptable but be aware this will create/use an API-issued token. Inconsistency: SKILL.md metadata mentions a config path that could expose local files if implemented, but that path is not declared in the registry metadata.
✓
Persistence & Privilege
always:false and no install means the skill doesn't request permanent platform-wide presence. It asks the agent to keep a session_id in-memory or in-session storage for ongoing calls, which is normal for an API client.
Assessment
This skill is instruction-only and appears to do what it claims: talk to nemovideo.ai to create/edit/export videos and images, using a single API token (NEMO_TOKEN). Before installing: (1) confirm you trust the nemovideo.ai domain since the skill will send your uploads and prompts there; (2) supply a dedicated API token or let it use an anonymous token if you prefer ephemeral credentials; (3) note the SKILL.md mentions a local config path (~/.config/nemovideo/) even though the registry metadata did not — ask the publisher whether the skill will read/write that directory; (4) avoid using highly sensitive data in uploads unless you trust the service and its privacy policy; and (5) because the publisher/homepage is unknown, consider testing with throwaway content/accounts first.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cd72pnhn2mmvdptt5r4vaxs84jtjd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎨 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments