by 安全扫描
OpenClaw
安全
high confidence该技能的请求和运行指令与基于云的图片转视频服务一致，使用单一服务令牌（NEMO_TOKEN）；SKILL.md 中没有要求提供无关凭据或执行意外的系统级操作。
评估建议
该技能将图片和命令发送到外部服务（mega-api-prod.nemovideo.ai）并使用服务令牌（NEMO_TOKEN）。仅在信任该服务时设置 NEMO_TOKEN。若未提供令牌，技能可以生成短期匿名令牌。注意：SKILL.md 中提到检测本地安装/配置路径（如 ~/.clawhub/、~/.cursor/skills/、~/.config/nemovideo/），这仅为有限的文件系统探测，以推导头部或配置。如果您对任何本地路径检查感到不适，请避免安装。上传敏感图片前，请验证服务的隐私/版权政策。...详细分析 ▾
✓ 用途与能力
Name/description match the actions in SKILL.md: the skill uploads user images, creates render jobs, polls status, and returns download URLs — all via the nemovideo API. Requiring a single service token (NEMO_TOKEN) is coherent with that purpose.
ℹ 指令范围
Instructions are focused on the nemovideo API (session creation, SSE, upload, export). They instruct generating an anonymous token if NEMO_TOKEN is not present and to save session_id. The SKILL.md also mentions detecting an install path and deriving an X-Skill-Platform header from local paths (e.g., ~/.clawhub/, ~/.cursor/skills/), which implies checking filesystem paths; this is narrow but worth noting to users who may not expect the agent to probe those locations.
✓ 安装机制
No install spec or external downloads — instruction-only skill (no code files), so nothing is written to disk by an installer.
✓ 凭证需求
Only one credential is required (NEMO_TOKEN / primaryEnv), which is proportional to calling the third-party API. The SKILL.md supports generating a short-lived anonymous token via the service API when an env var is absent.
✓ 持久化与权限
always:false and normal autonomous-invocation defaults. The skill instructs saving session_id in-session but does not request permanent system-wide privileges or modify other skills/configurations.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
["发布「Best Free Image to Video AI」技能的初始版本。","将静态图片（JPG、PNG、WEBP、HEIC，最大 200MB）转换为 1080p MP4 视频片段，利用云 GPU。","快速处理：约 30–60 秒内返回完成的视频。","支持用户注册或匿名模式，使用 7 天/100 信用额度的令牌。","处理导出、信用查询、上传和实时会话状态跟踪。","为社交媒体创作者和类似用例提供用户友好的工作流。"]
● 无害
安装命令 点击复制
官方npx clawhub@latest install best-free-image-to-video-ai
镜像加速npx clawhub@latest install best-free-image-to-video-ai --registry https://cn.clawhub-mirror.com
技能文档
（由于原始内容中未提供 SKILL.md 具体内容，此处无法翻译。若提供 SKILL.md 内容，可进行翻译。以下为示例）
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制