ClawHub

Instagram Reels Maker

v1.0.0

Get 1080p MP4 files from your video clips or images using this instagram-reels-maker tool. It runs AI Reels creation on cloud GPUs, so your machine does zero...

⭐ 0· 20·0 current·0 all-time
by@whitejohnk-26
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (cloud GPU Reels rendering) aligns with the declared primary credential (NEMO_TOKEN) and the API endpoints in SKILL.md. The skill only asks for a token for the service it claims to use and upload/download workflows match the described purpose.
ℹ
Instruction Scope
SKILL.md instructs uploading user media, creating sessions, using SSE, polling renders, and including Authorization headers — all expected for a remote render service. However the metadata declares a required config path (~/.config/nemovideo/) and instructions say to detect install path for an attribution header; the main runtime text does not describe reading that config path or agent filesystem. This is a minor inconsistency (possible justification: looking up stored tokens), but it should be explicit.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install profile. Nothing is downloaded or written to disk by an installer step in the package itself.
ℹ
Credentials
Only one credential is declared (NEMO_TOKEN), which is appropriate for a third-party rendering API. The metadata also lists a NemoVideo config path which could contain credentials; SKILL.md doesn’t clearly instruct whether or when to read that path. Consider whether you want to provide a persistent personal token vs. using an anonymous token as suggested.
✓
Persistence & Privilege
Skill is not always-on and does not request elevated platform privileges. It operates by making API calls and uploading user media to the external service; autonomous invocation is allowed but not unusual for skills.
Assessment
This skill appears to do what it says: upload your clips to NemoVideo and return rendered MP4s. Before installing: 1) Note the source/homepage are missing — verify you trust the NemoVideo domain (mega-api-prod.nemovideo.ai) and the skill publisher. 2) Prefer using an anonymous token flow (the skill documents how to get a temporary token) instead of pasting a long-lived personal NEMO_TOKEN unless you trust the service. 3) Ask the maintainer to clarify why ~/.config/nemovideo/ and install-path detection are declared in metadata (will the skill read local files?) — if you don’t want local config inspected, do not provide a token and use the anonymous path. 4) Remember user media will be uploaded to the remote API; check NemoVideo’s privacy/retention policies for sensitive content before sending files.

Like a lobster shell, security has layers — review code before you run it.

latestvk9754qfx3rjzyq192zqwqemne184f0pv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments