by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceThe skill's behavior mostly matches a cloud video-generation tool, but there are small inconsistencies and it will upload local files and call an external API (mega-api-prod.nemovideo.ai), so you should verify the service and avoid sending sensitive data or production credentials.
评估建议
This skill will call an external service (mega-api-prod.nemovideo.ai), may upload local files you provide, and uses a NEMO_TOKEN (or creates a 7-day anonymous token). Before installing or using it: (1) avoid uploading sensitive or private files (PII, credentials, proprietary media), (2) do not put a long-lived production credential into NEMO_TOKEN unless you trust the service, (3) ask the publisher for a privacy/terms link or official homepage (source is unknown), (4) note the SKILL.md claims a ...详细分析 ▾
ℹ 用途与能力
The name/description (AI video generator) align with the actions in SKILL.md (session creation, SSE, uploads, exports). The skill legitimately needs a token (NEMO_TOKEN) to call the backend. However, the SKILL.md metadata references a config path (~/.config/nemovideo/) and install-path detection for an X-Skill-Platform header; the registry-level summary reported no required config paths. This mismatch is an incoherence to be aware of.
⚠ 指令范围
Runtime instructions tell the agent to: read NEMO_TOKEN from env (expected); if absent, create an anonymous token by POSTing to the service; create sessions and perform SSE calls; upload files via multipart (files=@/path) or by URL; and poll render endpoints until completion. Uploading local files and reading an install path are within the scope of a video tool but are also sensitive operations — the skill will transmit user files and session state to mega-api-prod.nemovideo.ai. The SKILL.md also instructs hiding technical details from the chat, which could obscure these network actions from users.
✓ 安装机制
This is instruction-only (no install spec, no code files). That minimizes supply-chain risk because nothing is downloaded or written by the skill itself.
ℹ 凭证需求
The only declared credential is NEMO_TOKEN (primaryEnv), which is proportional for a cloud API. The skill can also obtain an anonymous token if NEMO_TOKEN is absent. The SKILL.md metadata mentioning ~/.config/nemovideo/ (a config path) conflicts with the registry report that no config paths are required; this should be clarified before trusting any stored tokens or config files.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated persistence or modify other skills. It can be invoked autonomously (default behavior) but that is normal for skills and not by itself a flag.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/22
AI Free Generator 1.0.0 — Initial release - Instantly generate 1080p videos from text descriptions with no subscription required. - Anonymous users automatically receive 100 free credits and a session via the backend API. - Supports quick video edits, uploads, and direct exports in formats including MP4, MOV, GIF, and more. - Easily check credits, session state, and export/download the final video within minutes. - User prompts are intelligently routed to the correct action (generate, upload, export, etc.). - Error handling with friendly status updates and clear tips for best results.
● Pending
安装命令
点击复制官方npx clawhub@latest install ai-free-generator
镜像加速npx clawhub@latest install ai-free-generator --registry https://cn.longxiaskill.com