📦 React
v1.0.0组件生成器 免费 跳过专业编辑软件的学习曲线。描述你的需求——即可生成一个免费的 React 下拉组件的屏幕录制演示，包含……
0· 13·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
medium confidence该技能的行为与云端视频生成服务大体一致，但存在 manifest/instruction 不匹配及来源缺失，安装或提供凭据前需谨慎。
评估建议
This skill appears to be a cloud video-generation frontend that uploads user media and uses a token (NEMO_TOKEN) for API calls. Before installing or supplying credentials:
- Confirm provenance: there is no homepage and the source is unknown. Ask the publisher for a repo or privacy/terms link.
- Prefer the anonymous flow: if you don't want to expose any long-lived token, use the described anonymous-token fallback or a dedicated limited-scope token rather than a high-privilege key.
- Clarify meta...详细分析 ▾
ℹ 用途与能力
The name/description claim cloud-based React component demo video generation and the instructions consistently use a nemovideo.ai API — that aligns. However the SKILL.md frontmatter and the registry metadata disagree about config paths (SKILL.md lists ~/.config/nemovideo/ while registry metadata showed none) and the skill declares NEMO_TOKEN as required even though the instructions describe an anonymous-token fallback. These mismatches look like sloppy metadata rather than immediate maliciousness, but they reduce confidence.
✓ 指令范围
Runtime instructions stay within the stated purpose: create a session, upload media, stream SSE for generation, poll render status, and return download URLs. The agent is instructed to read NEMO_TOKEN from environment or acquire an anonymous token via an API call. No instructions appear to read unrelated system files, secrets, or user data beyond the files the user uploads.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files — lowest installation risk. Nothing is downloaded or written to disk by an installer as part of this skill package.
ℹ 凭证需求
The skill declares a single credential (NEMO_TOKEN) which is proportionate for a third‑party API. But the manifest/instructions conflict: the registry lists NEMO_TOKEN as required/primaryEnv while SKILL.md explicitly provides a fallback path to obtain an anonymous token if NEMO_TOKEN is absent. That inconsistency should be clarified. Also metadata in SKILL.md asks for a config path (~/.config/nemovideo/) not reflected in the registry listing.
✓ 持久化与权限
The skill does not request always:true and does not ask to modify other skills or system-wide agent settings. Autonomous invocation is allowed (platform default) but is not combined with other high privileges here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
React Component Generator Free 初始发布 - 通过文本提示即时生成 React 组件的录屏演示视频 - 支持 MP4、MOV、WebM、GIF 及多种图片/音频格式上传，最大 200MB - 无需本地配置，全部处理在云端 GPU 完成 - 连接流程简单，自动处理 token 与 session - 内置查看额度、上传文件、导出视频、浏览时间线状态功能 - 前端开发者快速可视化并展示 React 组件的理想工具
● 无害
安装命令
点击复制官方npx clawhub@latest install react-component-generator-free
镜像加速npx clawhub@latest install react-component-generator-free --registry https://cn.longxiaskill.com