🖼️ Photo Video Maker Easy — 图片视频制作工具
v1.0.0为休闲创作者和社交媒体用户提供将照片和图像转换为精致的幻灯片视频的工具。支持JPG、PNG、HEIC、WebP格式，最大200MB，云端GPU渲染1080p，30-60秒内生成MP4文件。
0· 25·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidence该技能主要与基于云的照片转视频服务一致（仅需NEMO_TOKEN并与nemo API交互），但元数据存在小差异，几条指令需要澄清后才能信任使用，特别是处理私密照片和凭证。
评估建议
该技能看似真正实现了云端照片转视频工作流，只请求单一API令牌（NEMO_TOKEN）。安装前：（1）验证'mega-api-prod.nemovideo.ai'的来源和可信度，以及上传私密照片的舒适度；（2）确认配置路径(~/.config/nemovideo/)的不一致——询问发布者是否会读写该目录；（3）避免在NEMO_TOKEN中放置无关机密，偏好使用匿名令牌流实现有限、短期访问；（4）如果需要更强的保证，请求发布者的媒体和日志保留政策。这些澄清将提高信心；否则，视为可疑。...详细分析 ▾
ℹ 用途与能力
The name/description (turn photos into slideshow videos) lines up with the runtime instructions: uploads, session creation, SSE, render/export endpoints at mega-api-prod.nemovideo.ai. Requested credential (NEMO_TOKEN) is consistent with a third-party API token. However, the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata reported no required config paths — this mismatch should be resolved.
ℹ 指令范围
The SKILL.md instructs only API calls (auth, session, upload, render) and standard file uploads; it does not tell the agent to read arbitrary system secrets or unrelated files. Two items to note: (1) it says to auto-detect an install path to set X-Skill-Platform (this may require reading agent/install path metadata), and (2) it requires saving session_id and using Bearer tokens—expected for this API but you should confirm how uploaded files are transmitted/stored by the remote service. No instructions appear to exfiltrate other environment variables or system files.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest install risk. All runtime actions are network/API calls; nothing is written or downloaded by an install phase.
ℹ 凭证需求
Only one environment variable is requested (NEMO_TOKEN), which is proportionate for a service that needs an API token. Caveat: SKILL.md also documents generating an anonymous token flow and lists a config path in frontmatter (~/.config/nemovideo/) — if the skill actually reads/writes that path, it increases access scope and should be declared explicitly. Confirm whether the skill will attempt to read that config path or other files.
✓ 持久化与权限
Skill is not marked always:true and does not request persistent platform-level privileges. It does request storing a session_id for workflow continuity (normal). Autonomous invocation is allowed (platform default) but not combined with other high-risk flags.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/11
Photo Video Maker Easy 1.0.0 — 初始发布 - 从上传的照片（JPG、PNG、HEIC、WebP，最大200MB）创建可分享的幻灯片视频，渲染为1080p，耗时30-60秒。 - 自动会话设置和匿名令牌管理，快速启动（无需注册即可使用免费层）。 - 支持基本编辑操作：时间线排列、添加音轨、文本叠加。 - 导出可下载的MP4视频文件；也支持其他格式（mov、webm、mp3等）。 - 简化的工作流，涵盖上传、编辑、导出和状态/信用检查。 - 整个过程中全面错误处理和清晰的用户反馈。
● 无害
安装命令
点击复制官方npx clawhub@latest install photo-video-maker-easy
镜像加速npx clawhub@latest install photo-video-maker-easy --registry https://cn.longxiaskill.com
技能文档
请参见下方（保持原文，仅示例，实际应完全保留原始SKILL.md内容）