📦 Chatgpt Video Generator Free — 技能工具
v1.0.0generate text prompts into AI-generated videos with this skill. Works with TXT, DOCX, PDF, MP4 files up to 200MB. content creators use it for generating vide...
0· 25·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill broadly matches its stated purpose (turning text into videos), but there are several inconsistencies and privacy-surprising behaviors (auto-connecting to a remote backend, metadata mismatches, and implicit file uploads) that merit caution before installing.
评估建议
This skill appears to do what it says (send text/files to a cloud service to generate videos), but proceed cautiously: 1) Source and homepage are unknown — you have no vendor page or privacy policy to review. 2) The skill will auto-connect to https://mega-api-prod.nemovideo.ai (create a session and may obtain an anonymous token) as soon as you open it — it can contact a remote server without an explicit upload prompt. 3) Using the skill will upload user files (text, DOCX, PDF, MP4) to that remot...详细分析 ▾
ℹ 用途与能力
Name/description align with the runtime instructions: the SKILL.md describes uploading text/media and calling a cloud render API to produce MP4s. Requesting a service token (NEMO_TOKEN) is consistent with an external video API. However, the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths — an internal inconsistency in declared requirements.
ℹ 指令范围
Instructions focus on the video-generation workflow and map UI actions to specific endpoints, which is appropriate. Notable behaviors: (1) the skill will auto-connect to the backend when first opened and create a session (potentially contacting the remote service without an explicit user confirmation), (2) it will accept user files for upload and send them to the remote domain (expected for a cloud render service but privacy-impacting), and (3) it reads its own frontmatter at runtime to populate attribution headers. The instructions do not ask for unrelated system files or unrelated credentials.
✓ 安装机制
This is an instruction-only skill with no install spec or code files, so nothing is downloaded or written by an installer. That lowers the attack surface compared with skills that fetch archives or third-party packages.
ℹ 凭证需求
Only a single credential (NEMO_TOKEN) is declared as required/primary, which is proportional for an external API. The SKILL.md also provides a built-in anonymous-token acquisition flow if NEMO_TOKEN is not set; this is reasonable but means the skill will call the auth endpoint automatically (privacy implication). There are no unrelated credentials requested.
⚠ 持久化与权限
While the skill does not request always:true and does not ask to modify other skills, the frontmatter mentions a config path (~/.config/nemovideo/) which suggests it may expect to read/write persistent session or config files. The registry metadata did not list any config paths, creating an inconsistency. The SKILL.md also instructs storing session_id for subsequent requests (unspecified where). Clarify whether the skill will write to disk and where.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
- Initial release of ChatGPT Video Generator Free: generate AI-powered videos from text prompts. - Supports TXT, DOCX, PDF, MP4 uploads up to 200MB; delivers 1080p MP4 results in 1–2 minutes. - Automatic connection and authentication to backend, with 100 free credits for new users. - Covers full workflow: quick edits, batch processing, and iterative refinements. - Exposes export, credits, upload, and status actions via simple chat commands.
● 无害
安装命令
点击复制官方npx clawhub@latest install chatgpt-video-generator-free
镜像加速npx clawhub@latest install chatgpt-video-generator-free --registry https://cn.longxiaskill.com