🛍️ Ai — AI
v1.0.0产品视频 只需输入需求，即可将三张产品照片和一个 Logo 转化为 1080p 精美产品视频。无论是用照片制作产品展示视频……
0· 23·0 当前·0 累计
by @linmillsd7下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
安全
medium confidenceThe skill's requests and runtime instructions are consistent with a remote video-rendering service and only require a single service token (NEMO_TOKEN); nothing in the instructions suggests access to unrelated credentials or system resources beyond small, expected metadata reads.
评估建议
What to consider before installing:
- This skill uploads user images and a token to an external API at mega-api-prod.nemovideo.ai. Confirm you trust that domain and its privacy/retention policy before sending sensitive images.
- The skill expects a NEMO_TOKEN; only provide a token scoped to this service. Prefer a limited or throwaway token if you want to reduce risk.
- The SKILL.md frontmatter references a config path (~/.config/nemovideo/) but the registry lists no required config paths — ask t...详细分析 ▾
✓ 用途与能力
The skill is described as a cloud-based product-photo→video service and its runtime instructions call a remote API, upload user images, create render jobs, and return download URLs. Requiring a single NEMO_TOKEN credential (or obtaining an anonymous token) is coherent with that purpose. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) in its metadata, but the registry metadata shows no required config paths; this mismatch should be clarified but does not by itself indicate malicious intent.
ℹ 指令范围
Instructions focus on authenticating, session creation, SSE streaming, uploads, and polling export status—all within the scope of a render service. The skill instructs reading its own frontmatter (for version) and detecting install path to populate X-Skill-Platform headers; these are limited metadata reads but do require the agent to inspect its environment. The instructions do not direct reading arbitrary user files or other credentials beyond NEMO_TOKEN.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. That is the lowest-risk install model.
✓ 凭证需求
Only one credential is declared (NEMO_TOKEN) and the SKILL.md uses it for Bearer auth to the documented API. If NEMO_TOKEN is absent the skill requests an anonymous token from the backend (no additional credentials requested). The only minor concern is the frontmatter's mention of a config path (~/.config/nemovideo/) which could contain tokens; registry metadata did not declare any config paths—this discrepancy should be resolved.
✓ 持久化与权限
The skill is not always-enabled and does not request system-wide persistence. It does not instruct modification of other skills or global agent settings. Autonomous invocation is allowed but that is the platform default and not in itself a reason to flag the skill.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/20
- Initial release of AI Product Video v1.0.0. - Instantly creates polished 1080p product videos from user photos and a logo; no timeline or export settings required. - Seamless cloud-based workflow: upload images, describe your desired result, and receive a rendered video in 1-2 minutes. - Built-in credits system with starter token support for new users. - Supports multiple common formats for video and images (mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac). - Clear error handling, session management, and guided interactions for a smooth user experience.
● 无害
安装命令
点击复制官方npx clawhub@latest install ai-product-video
镜像加速npx clawhub@latest install ai-product-video --registry https://cn.longxiaskill.com