📦 Text To Video Demo — 技能工具
v1.0.0generate text prompts into AI generated videos with this skill. Works with TXT, DOCX, PDF, SRT files up to 500MB. marketers use it for generating videos from...
0· 18·0 当前·0 累计
by 安全扫描
OpenClaw
安全
medium confidenceThe skill's declared purpose (convert text into videos) matches its instructions and required credential (NEMO_TOKEN); it is internally consistent, but it will send user files and tokens to an external service and the package metadata references a local config path that isn't clearly justified.
评估建议
This skill appears to do what it says: it uploads your text/scripts and files to a third-party video generation backend and returns a downloadable MP4. Before installing or using it, consider: (1) privacy — your files (text, scripts, media) will be sent to https://mega-api-prod.nemovideo.ai; don’t upload sensitive data unless you trust that service and its retention policy; (2) credentials — you can provide your own NEMO_TOKEN or the skill will request an anonymous token on your behalf (the toke...详细分析 ▾
✓ 用途与能力
Name, description, and runtime instructions all describe a cloud-based text→video service. The single required env var (NEMO_TOKEN) and the listed API endpoints are appropriate for that purpose.
ℹ 指令范围
Instructions are scoped to interacting with the remote API (session creation, SSE, uploads, render). Important runtime behaviors: (1) the skill will upload user files (up to 500MB) to https://mega-api-prod.nemovideo.ai; (2) if NEMO_TOKEN is not present, the skill will request an anonymous token for you by POSTing to the service; (3) it requires adding attribution headers to every request. There is no instruction to read arbitrary local files, but the SKILL metadata lists a config path (~/.config/nemovideo/) which the instructions do not explicitly use — minor mismatch to note. Because the skill transmits user content and session tokens to a third-party endpoint, evaluate data-sensitivity before use.
✓ 安装机制
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is the lowest-installation risk profile.
ℹ 凭证需求
Only NEMO_TOKEN is required, which is proportionate for a cloud API client. The metadata also declares a config path (~/.config/nemovideo/) that could imply optional local token storage or config access; the SKILL.md does not explain why that path is needed. The skill can obtain an anonymous token on its own if none is provided.
✓ 持久化与权限
The skill does not request permanent/always-on presence (always:false). Session IDs and tokens are used at runtime for API calls; no instructions request modifying other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/16
- Initial release of the text-to-video-demo skill. - Generate AI videos from text prompts or scripts using cloud GPU processing. - Supports TXT, DOCX, PDF, SRT files up to 500MB; outputs 1080p MP4 videos. - Simple “drop and go” setup with automatic token acquisition on first use. - Common workflows: quick scripts to video, batch processing, and iterative edits, all managed in-session. - Provides clear status updates, credit checks, and export/download functions.
● 无害
安装命令
点击复制官方npx clawhub@latest install text-to-video-demo
镜像加速npx clawhub@latest install text-to-video-demo --registry https://cn.longxiaskill.com镜像同步中