📦 Generator — 生成器

v1.0.0

Maker Generator 跳过专业编辑软件的学习曲线。只需描述你的需求——即可创建一个生成器，将产品照片自动转为带音乐的推广视频……

0· 15·0 当前·0 累计

by @nemovideonemo

开发工具代码生成系统工具视频处理图像处理

下载技能包

最后更新

2026/4/20

安全扫描

VirusTotal

可疑

查看报告

OpenClaw

可疑

medium confidence

The skill's actions mostly match a remote video-rendering integration, but there are inconsistencies (declared config-paths differ between registry and SKILL.md) and instructions that could hide or persist credentials and make network calls to an external API — review before installing or providing files/credentials.

评估建议

This skill appears to be a front-end for a third‑party video rendering API (nemovideo.ai). Before installing or using it: 1) Confirm you trust the nemovideo.ai domain and want your media uploaded to that service; uploads may include sensitive images/audio. 2) Be aware the skill will obtain and persist an anonymous token if NEMO_TOKEN is not provided — ask where tokens/sessions are stored and how to revoke them. 3) The SKILL.md tells the agent not to show raw API responses or token values — that ...

详细分析 ▾

ℹ 用途与能力

Name/description match what the instructions do: call a remote Nemovideo API to create and render video 'generators' and upload user media. Requesting a single NEMO_TOKEN credential is coherent. However, SKILL.md metadata lists a required config path (~/.config/nemovideo/) while the registry metadata said no config paths; this discrepancy is unexplained and worth clarifying.

⚠ 指令范围

Runtime instructions instruct the agent to automatically request an anonymous token, create and store a session_id, upload local files when asked, detect install path to set attribution headers, and explicitly instruct the agent not to display raw API responses or token values. Automatically obtaining and persisting tokens and suppressing display of token values increases the risk of silent credential storage/exfiltration. Reading install paths and (~/.config/nemovideo/) is outside pure prompt handling and touches the user's filesystem.

✓ 安装机制

Instruction-only skill with no install spec or code to download — lowest install risk. All behavior is from SKILL.md runtime instructions, not an installer.

ℹ 凭证需求

Only one declared env var (NEMO_TOKEN), which is appropriate for an external API. But SKILL.md also lists a config path (~/.config/nemovideo/) and instructs creation/storage of anonymous tokens — this expands credential persistence beyond a single env var and was not reflected in the registry metadata. The instruction to 'don’t display raw API responses or token values' could be used to keep tokens hidden from the user.

✓ 持久化与权限

always:false and default autonomous invocation are used (normal). The skill asks to store a session_id / token for subsequent API calls, which is expected for a session-based API; it does not request permanent platform-wide privileges or modify other skills.

安全有层次，运行前请审查代码。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/4/20

Initial release — Generator Maker Generator 1.0.0 - Instantly build and export AI-powered video generators from text prompts or templates, no editing experience required. - Supports uploading MP4, MOV, PNG, JPG files up to 500MB for automated generator creation. - Automated backend authentication and session management; get started with a free 7-day token. - Cloud GPU rendering pipeline delivers 1080p MP4s and other formats within minutes; team template sharing enabled. - Handles frequent actions (upload, export, check credits, status) via structured, intent-driven commands. - Clear error handling and feedback for unsupported files, rate limits, and authentication issues.

● 可疑

安装命令

点击复制

官方npx clawhub@latest install generator-maker-generator

镜像加速npx clawhub@latest install generator-maker-generator --registry https://cn.longxiaskill.com

数据来源：ClawHub ↗ · 中文优化：龙虾技能库