📦 Text To Video Kaiber — 技能工具
v1.0.0Turn a short descriptive text prompt like 'a sunset over ocean waves' into 1080p AI animated videos just by typing what you need. Whether it's generating AI...
0· 15·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's runtime instructions mostly match a text-to-video service (it needs a NEMO_TOKEN and calls nemovideo.ai endpoints), but there are a few unexplained behaviors around where it reads/writes data (install-path detection and saving tokens/session IDs) that don't fully align with the declared metadata.
评估建议
This skill appears to be a legitimate client for a nemo-video API and only requests a single credential (NEMO_TOKEN). Before installing or invoking it: 1) Ask the author/source for a homepage or repo so you can inspect where code would run and how tokens are stored. 2) Confirm where the skill will persist the anonymous token and session_id (metadata mentions ~/.config/nemovideo/ but runtime instructions also ask the agent to detect ~/.clawhub/ and ~/.cursor/skills/ — clarify/limit filesystem rea...详细分析 ▾
✓ 用途与能力
Name/description, required env var (NEMO_TOKEN), and the API endpoints called (mega-api-prod.nemovideo.ai) are coherent: a video-generation skill legitimately needs a service token and to call those endpoints.
⚠ 指令范围
SKILL.md instructs the agent to obtain/refresh tokens, save session_id and NEMO_TOKEN, and to detect install path to set X-Skill-Platform (checking ~/.clawhub/ or ~/.cursor/skills/). The metadata lists a configPath (~/.config/nemovideo/), but the runtime instructions request reading other agent install locations that were not declared. The file does not clearly state where tokens/session IDs should be stored or how long they persist.
✓ 安装机制
Instruction-only skill with no install spec and no downloaded code — lowest install risk.
ℹ 凭证需求
Only NEMO_TOKEN is required which matches the described cloud API usage. However, the instructions also create an anonymous token via the API and imply saving it. The metadata declares a config path (~/.config/nemovideo/), but runtime steps also request reading agent install locations (not declared). It's unclear whether tokens/session IDs are written to disk or exposed elsewhere.
✓ 持久化与权限
always:false and no claims of modifying other skills or system-wide settings. Autonomous invocation is allowed (platform default) and not by itself a red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/17
Initial release of Text to Video Kaiber — Generate AI Videos from Text. - Quickly generate 1080p AI animated videos from short text prompts. - Automatic setup with anonymous token and easy connection to cloud GPU render pipeline. - Supports text prompt input, video exports, credit balance checks, and file uploads. - Handles multiple file formats (mp4, mov, avi, jpg, png, gif, mp3, etc.). - Streamlined workflows for quick edits, batch processing, and iterative refinement. - User-friendly status updates, error handling, and cloud export with simple commands.
● 可疑
安装命令
点击复制官方npx clawhub@latest install text-to-video-kaiber
镜像加速npx clawhub@latest install text-to-video-kaiber --registry https://cn.longxiaskill.com