by 安全扫描
OpenClaw
安全
medium confidenceThe skill's declared purpose (cloud-based animated video generation) aligns with its instructions and single required credential (NEMO_TOKEN); nothing in the instructions points to unrelated or excessive access, but there are a few minor inconsistencies and privacy considerations to review before installing.
评估建议
This skill appears to do what it says: it talks to an external Nemo video API, uploads media, and returns rendered MP4s. Before installing, consider: (1) the service will receive any media you upload — avoid sending sensitive images or proprietary assets until you confirm the provider's privacy/retention policy; (2) the skill will use NEMO_TOKEN (or mint a short-lived anonymous token) — prefer using a scoped token you can revoke; (3) the SKILL.md references reading the skill frontmatter and dete...详细分析 ▾
✓ 用途与能力
The name/description match the runtime instructions: the skill talks to an external Nemo video API, uploads media, starts render jobs, and returns MP4s. Requesting a NEMO_TOKEN (and using it as a Bearer token) is coherent with that purpose.
ℹ 指令范围
Instructions focus on API calls needed for sessions, SSE, uploads, and exports. They also describe auto-acquiring an anonymous token if NEMO_TOKEN is absent, and say to derive some headers from the skill's YAML frontmatter and detect an install path to set X-Skill-Platform — this may cause the agent to read the skill file and/or probe common install paths. That is plausible for attribution but is broader filesystem awareness than strictly necessary.
✓ 安装机制
No install spec or code is present (instruction-only). No downloads or archive extraction are requested, minimizing installation risk.
ℹ 凭证需求
Only a single credential (NEMO_TOKEN) is declared, which is proportionate. The SKILL.md also describes minting an anonymous token via the service if no env var exists (reasonable). There is a minor metadata mismatch: the SKILL.md frontmatter references a config path (~/.config/nemovideo/) and install-path detection, while the registry metadata reported no required config paths.
✓ 持久化与权限
The skill does not request always: true or other elevated persistence. It creates short-lived sessions/tokens with the backend and does not claim to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
Animated Video Creator 1.0.0 — initial release - Create animated 1080p MP4 videos from text or images in 1-2 minutes using a cloud GPU pipeline. - Supports PNG, JPG, MP4, and GIF uploads up to 200MB. - Offers a free trial with 100 credits for new users; simple anonymous token signup available. - Key actions include upload, generate videos, check credit balance, view status, and export. - Common workflows: quick script-to-video, batch processing, and iterative editing with timeline state management.
● 无害
安装命令 点击复制
官方npx clawhub@latest install animated-video-creator
镜像加速npx clawhub@latest install animated-video-creator --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制