Text To Video Canva

v1.0.0

Turn a 150-word product description paragraph into 1080p text-based videos just by typing what you need. Whether it's converting written content into shareab...

0· 35·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The skill's name/description (text-to-video via NemoVideo) matches the single required credential (NEMO_TOKEN) and the API endpoints described. Note: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata said no config paths — this mismatch is likely a metadata inconsistency but does not itself break the stated purpose.
Instruction Scope
The SKILL.md provides concrete API calls for authentication, session creation, SSE streaming, uploads, and export — all within the expected scope of a cloud video render service. It explicitly instructs generating an anonymous token if no NEMO_TOKEN is present and saving session IDs. It also describes uploading local files (multipart '@ /path') which means the agent may read files the user selects; the instructions do not try to read unrelated system files, but users should not upload sensitive files unintentionally.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. Lowest install risk.
Credentials
Only one credential is required (NEMO_TOKEN), which is proportionate to calling the external API. The SKILL.md also supports generating an anonymous token via the API and using it as NEMO_TOKEN; this behavior is reasonable but means the skill can obtain and store a token on the fly. No other secrets or unrelated env vars are requested.
Persistence & Privilege
The skill does not request always:true, does not declare system-level config changes, and is user-invocable. It will create session tokens for API usage (normal for this service) but does not ask to modify other skills or global agent settings.
Assessment
This skill appears to do what it says: it will call an external NemoVideo API, create sessions, optionally generate an anonymous token, and upload user-supplied files for rendering. Before installing: (1) Confirm you trust the external domain (mega-api-prod.nemovideo.ai) and its privacy/terms, since uploaded text and media will be sent there. (2) Only upload media you are comfortable sharing — do not upload secrets or sensitive files. (3) Be aware the skill can create and store an anonymous NEMO_TOKEN if one isn't provided; consider using a disposable token or account if you want separation. (4) Note the small metadata mismatch (SKILL.md mentions ~/.config/nemovideo/) — this is likely harmless but worth asking the author for clarification if you need deterministic config-path behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk9728q70vea0gb7kczjzq27y9h84v52y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments