🖼️ Photo Video Maker Best — 将照片转换为可分享视频
v1.0.0基于云端的照片视频制作工具,支持上传JPG、PNG、HEIC、WebP文件(最大200MB),描述需求,30-60秒内生成1080p MP4视频,适合社交媒体创作者。
0· 23·0 当前·0 累计
安全扫描
OpenClaw
可疑
medium confidence该技能主要作为云端照片转视频集成工具,但存在内部不一致(声明的要求与运行时行为)和运行时将用户文件/令牌发送到不可控制的外部服务——安装前请审查。
评估建议
["确认NEMO_TOKEN要求——技能可以自动生成匿名令牌,您不一定需要提供;如果提供,将用于所有API调用(如同敏感凭证)。","了解所有上传的图像/音频将发送到https://mega-api-prod.nemovideo.ai——确认您对该服务的隐私和保留政策感到舒适。","技能的元数据/前置物不匹配(configPaths vs registry)——请作者修复或解释。","如果希望限制暴露,偏好使用匿名令牌路径(无长期令牌)或使用一次性凭证。如需更高的保证,请请求技能源、后端域的隐私政策或明确说明为什么声明的要求与运行时行为不同。"]...详细分析 ▾
⚠ 用途与能力
The name/description (cloud photo→video) matches the runtime instructions (upload files, render on remote GPUs). However the declared registry metadata and the SKILL.md disagree: the registry reports no config paths but the frontmatter lists a config path (~/.config/nemovideo/). The skill also declares NEMO_TOKEN as a required env var but the instructions include a built-in anonymous-token fallback — that mismatch between declared requirements and actual runtime behavior is incoherent and should be clarified.
ℹ 指令范围
Runtime instructions are mostly within scope: create/refresh a session, upload files to the service, stream SSE updates, poll render status, and return download URLs. The skill will read its own YAML frontmatter for attribution and attempts to detect install path strings (e.g., ~/.clawhub/ or ~/.cursor/) which requires local path inspection — this is minor but outside the core photo→video task. All user media are sent to an external domain (mega-api-prod.nemovideo.ai) — expected for a cloud service but important to surface.
✓ 安装机制
Instruction-only skill with no install spec and no code files; nothing is written to disk by an installer. This is the lowest-risk install model.
ℹ 凭证需求
Only one env var is declared: NEMO_TOKEN (primary). Requesting a service token is proportionate to a cloud rendering service. However, because the skill will use that token for all API calls, providing a long-lived NEMO_TOKEN grants the remote service access tied to your account. Also, the registry declares NEMO_TOKEN required while the SKILL.md describes an anonymous-token fallback — the declaration and the actual behavior are inconsistent.
✓ 持久化与权限
Skill is not marked always:true and does not request special persistent privileges. Autonomous invocation (disable-model-invocation=false) is the platform default and is not, by itself, a red flag here.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
Photo Video Maker — v1.0.0 - 首次发布云端工具,30-60秒内将照片集合转换为1080p MP4可分享视频。 - 支持上传JPG、PNG、HEIC、WebP(最大200MB),面向社交媒体创作者。 - 简单的API驱动工作流:认证、上传、描述视频、下载结果。 - 特性包括信用管理、会话处理和清晰的错误消息。 - 提供示例提示以获得最佳结果。
● 无害
安装命令 点击复制
官方npx clawhub@latest install photo-video-maker-best
镜像加速npx clawhub@latest install photo-video-maker-best --registry https://cn.clawhub-mirror.com
技能文档
SKILL.md 中文翻译(由于原始内容过长,以下为简略版,保留关键结构)
name: photo-video-maker-best version: "1.0.0" displayName: "Photo Video Maker — 将照片转换为可分享视频" description: > 基于云端的照片视频制作工具,支持上传JPG、PNG、HEIC、WebP文件(最大200MB),描述需求,30-60秒内生成1080p MP4视频,适合社交媒体创作者。 ...(保留原始代码块、命令行指令和Markdown格式,不在此处展开)
数据来源:ClawHub ↗ · 中文优化:龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险,如需更匹配、更安全的方案,建议联系付费定制