⚛️ 免费
v1.0.0React Component Generator 上传文本提示（MP4、MOV、AVI、WebM，最大 200MB），无需拖动任何滑块，即可生成可直接发布的 React 组件。
0· 16·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
high confidenceThe skill claims to generate React components but its runtime instructions talk to a remote video-rendering service (nemovideo) and automatically obtains/stores an access token and uploads user files — the purpose, required access, and actions don't add up.
评估建议
This skill's documentation and runtime steps are inconsistent: it advertises 'React component' generation but actually wires to a remote video-rendering service (mega-api-prod.nemovideo.ai). Before installing or using it, consider:
- Do you trust the external domain (nemovideo) to receive any files you upload? The skill will upload media (up to 200MB) and possibly other content to that service.
- The skill will auto-create an anonymous token if none exists and instructs the agent to store/use ...详细分析 ▾
⚠ 用途与能力
The skill is named and described as a 'Free React Component Generator' (implying code output), but the SKILL.md describes a cloud GPU video render pipeline, exporting MP4/MOV/etc. and interacting with mega-api-prod.nemovideo.ai. Requiring a NEMO_TOKEN and a config path for ~/.config/nemovideo/ is consistent with a video service, not a code/component generator — this is a clear mismatch between advertised purpose and requested capabilities.
⚠ 指令范围
The instructions direct the agent to obtain an anonymous token (POST to an external API), create and store a session_id, upload user files (up to 200MB), stream events via SSE, poll for render completion, and include custom headers derived from local install paths. The SKILL.md also instructs not to display raw API responses or tokens. These runtime steps involve network calls, credential creation/usage, file uploads, and reading/detecting local install paths — all of which exceed what you would expect from a simple 'React component generator' and raise privacy/consent questions for uploaded content and token handling.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. That lowers mechanical risk compared to downloaded/executable installs.
⚠ 凭证需求
The only declared credential is NEMO_TOKEN which matches the nemovideo endpoints used in the instructions. However, asking for that token (and declaring a nemovideo config path) is disproportionate relative to the skill's marketed purpose (generating React code). Also the skill instructs creating/storing an anonymous token automatically if none is present, which grants the backend access to uploaded files and render jobs without explicit user-driven token provisioning.
✓ 持久化与权限
The skill is not marked always:true, has no install-time binary, and does not request system-wide configuration changes. Autonomous invocation is allowed (platform default) but is not combined here with an elevated privilege like always:true.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release. - Launches "Free React Component Generator" for generating ready-to-use React components from user prompts. - Supports text prompt uploads (up to 200MB video files) and direct instruction input. - Provides automatic backend connection and token management with 100 free credits for anonymous users. - Exports generated components as 1080p MP4 and other formats through a cloud GPU render pipeline. - Includes prompt routing, session state management, and interactive error handling. - Offers guidance for quick edits, batch processing, and iterative refinement.
● 可疑
安装命令
点击复制官方npx clawhub@latest install free-react-component-generator
镜像加速npx clawhub@latest install free-react-component-generator --registry https://cn.longxiaskill.com