📦 Pika
v1.0.0用此技能将文本提示或图片生成 AI 视频片段，支持 MP4、PNG、JPG、WebM 文件，最大 200MB。内容创作者和营销人员使用……
0· 14·0 当前·0 累计
by 下载技能包
最后更新
2026/4/26
安全扫描
OpenClaw
可疑
medium confidence该技能基本符合视频生成集成的要求，但存在细微不一致（metadata vs registry），会指示智能体自动创建并存储短期 API token，并将用户文件上传至外部服务 —— 请在安装或上传敏感内容前进行审查。
评估建议
This skill appears to be a reasonable wrapper for a cloud video-rendering API, but review the following before installing or using it: 1) It will upload whatever files you give it (videos, images, audio) to the external host (mega-api-prod.nemovideo.ai). Do not upload private or sensitive files unless you trust the service and its privacy policy. 2) If you don't provide a NEMO_TOKEN, the skill will automatically request an anonymous token for you and treat that as the credential — understand wha...详细分析 ▾
ℹ 用途与能力
Name, description, required env var (NEMO_TOKEN) and the REST endpoints in SKILL.md align with a cloud video-rendering service. However the YAML frontmatter includes a configPaths entry (~/.config/nemovideo/) while the registry metadata lists no required config paths — this mismatch is an incoherence in declared requirements. The skill also derives attribution headers from install paths (reads install location) which implies some filesystem-awareness beyond simply calling an API.
ℹ 指令范围
SKILL.md keeps to the stated purpose: it instructs the agent to create sessions, upload media, stream SSE events, request renders, and poll results at the stated API host. Two items to note: (1) if NEMO_TOKEN is absent the instructions automatically POST to an anonymous-token endpoint and treat the returned token as NEMO_TOKEN (the skill will obtain credentials on the user's behalf); (2) the skill will upload user-provided files (up to ~200MB) to the external domain (mega-api-prod.nemovideo.ai) — expected for this functionality but relevant for privacy/data-exfiltration risk. The document also instructs the agent not to display raw API responses or token values, which is a UX guideline but reduces transparency about what the agent stores or transmits.
✓ 安装机制
This is an instruction-only skill with no install spec and no packaged code to download or execute, which is the lowest-risk install profile.
✓ 凭证需求
Only a single credential (NEMO_TOKEN) is declared as required and is appropriate for a third‑party API integration. The skill's instructions for creating an anonymous token when none is present are proportionate to the described free-trial flow (100 free credits, 7 days).
ℹ 持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. It does instruct storing and reusing a session_id and/or token for subsequent requests; it may also read an install path to set attribution headers. The earlier-mentioned metadata entry for ~/.config/nemovideo/ suggests possible filesystem read/write intent — inconsistent with registry metadata and worth clarification.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/26
Pika AI Video Generation 技能首发 - 支持文本或图片生成 AI 视频片段，兼容 MP4、PNG、JPG、WebM（最大 200MB） - 自动连接后端并建立会话，匿名认证即送免费额度 - 面向内容创作者与营销人员的 prompt 驱动工作流，云端 1080p 渲染 30–90 秒 - 提供导出、额度查询、状态检查、上传、AI 生成等简洁命令 - 完善的错误处理与会话管理，过程反馈简洁明了 - 支持视频、图片、音频多格式输入，导出适配各大社交平台
● Pending
安装命令
点击复制官方npx clawhub@latest install pika-ai-video-generation
镜像加速npx clawhub@latest install pika-ai-video-generation --registry https://cn.longxiaskill.com