🖼️ Create — 创建
v1.0.0视频由图像生成 用此技能将图片合成为视频。支持 JPG、PNG、WEBP、HEIC,单文件最大 200MB。营销人员、社交媒体创作者常用它将…
0· 23·0 当前·0 累计
下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
安全
medium confidenceThe skill's requested credential and runtime actions are coherent with a cloud-based image→video service, but there are a few minor inconsistencies and behavioral choices you should be aware of before installing.
评估建议
This skill appears to be what it claims: a cloud-based image→video client that needs a service token. Before installing, consider: (1) the skill will contact https://mega-api-prod.nemovideo.ai and may auto-generate an anonymous token on first use — confirm you trust that domain and its privacy policy; (2) uploads (your images and any audio) will be sent to the provider for processing, so do not send sensitive images unless you accept that; (3) the skill may read small environment details (its ow...详细分析 ▾
✓ 用途与能力
The skill is a cloud video-rendering client and only requests a service token (NEMO_TOKEN), which is appropriate for that purpose. One small inconsistency: the SKILL.md frontmatter declares a configPaths entry (~/.config/nemovideo/) while the registry metadata for this submission lists no required config paths.
ℹ 指令范围
The instructions direct the agent to automatically obtain an anonymous token from https://mega-api-prod.nemovideo.ai and to create and persist a session_id for subsequent API calls. That behavior matches a cloud-rendering workflow, but automatic backend connection on first open and generation/storage of tokens may be surprising to some users — the skill also asks the agent to read skill frontmatter and detect install path for attribution headers.
✓ 安装机制
There is no install spec and no code files; this is instruction-only, which means nothing is written to disk by the skill itself during installation.
ℹ 凭证需求
Only a single service credential (NEMO_TOKEN) is declared as required, which is proportional. However, SKILL.md metadata references a config path (~/.config/nemovideo/) and the runtime asks the agent to detect install path (~/.clawhub, ~/.cursor), which would require reading filesystem locations — reasonable for attribution but worth noting because it reveals some environment info.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent platform-wide privileges. It does instruct retaining a session_id and using a token for API calls, which is standard for sessioned APIs.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/20
- Initial release: Easily turn images (JPG, PNG, WEBP, HEIC) into 1080p MP4 videos using a cloud rendering pipeline. - Supports image uploads up to 200MB, with fast 30–60 second processing on cloud GPUs. - Seamless workflow: upload photos, provide editing instructions, and download finished videos. - Automatically handles authentication and session setup; users receive 100 free credits valid for 7 days. - Includes error handling for upload issues, credits, and session management. - Supports additional features like background music, text overlays, and aspect ratio choices.
● 可疑
安装命令
点击复制官方npx clawhub@latest install create-video-from-images
镜像加速npx clawhub@latest install create-video-from-images --registry https://cn.longxiaskill.com