📦 Video — 视频
v1.0.0Gen Script Free 无需动任何滑块，即可获得可直接发布的现成脚本。上传你的文本提示或主题（MP4、MOV、TXT、DOCX，最大 200MB），说点什么……
0· 19·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
medium confidenceThe skill's declared purpose (generate video scripts and exports) is plausible and mostly matches its runtime instructions, but there are inconsistencies around declared config paths and the instructions ask the agent to read install/config locations and to obtain/use tokens and upload user files to an external API — enough unexplained behavior to warrant caution.
评估建议
This skill will send user-provided text and uploaded files to an external API (mega-api-prod.nemovideo.ai) and requires a NEMO_TOKEN (or will fetch an anonymous token for you). Before installing: 1) Confirm you trust the nemovideo.ai domain because uploads (videos, docs) and generated tokens are sent there; avoid uploading sensitive materials unless you're comfortable. 2) Ask the publisher to explain why the SKILL.md references ~/.config/nemovideo/ and install-path detection (~/.clawhub, ~/.curs...详细分析 ▾
ℹ 用途与能力
The skill claims a cloud-backed video/script generation service and requests a single credential (NEMO_TOKEN), which is consistent with calling an external API. However the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata earlier stated no required config paths — this mismatch is unexpected and should be clarified.
⚠ 指令范围
Runtime instructions include network calls to https://mega-api-prod.nemovideo.ai, file uploads, SSE stream handling, and logic to detect the agent's install path (~/.clawhub or ~/.cursor/skills) and to use headers derived from the skill's frontmatter. Detecting install paths or reading config directories requires filesystem access beyond just sending user-provided files, and the skill's registry metadata did not consistently declare those paths. The instructions do not ask the agent to read unrelated user files, but the install-path/config access is scope creep that should be justified.
✓ 安装机制
There is no install spec and no code files — the skill is instruction-only. That minimizes disk-write risk; all risky behavior would occur at runtime via network calls and any filesystem checks the agent performs.
ℹ 凭证需求
Only NEMO_TOKEN is required, which fits a cloud API-backed service. However the SKILL.md includes a fallback that generates an anonymous token by POSTing to an external auth endpoint (which is reasonable), and the frontmatter references a config path (~/.config/nemovideo/) not declared elsewhere. Requiring or reading local config files would expand the credential surface; confirm whether the skill actually needs to read that config directory.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. It does not declare persistent installation actions. Autonomous invocation is allowed (default) but not in itself a red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release of video-gen-script-free. - Instantly generate ready-to-post video scripts by submitting a topic or prompt (MP4, MOV, TXT, DOCX, up to 200MB). - Easy backend connection: uses NEMO_TOKEN if available, otherwise auto-creates a free session with 100 credits. - Responsive workflow: upload files, generate scripts, preview timeline, and export full HD MP4 videos in about 30–90 seconds. - Simple commands available for checking credits, uploading, generating, exporting, or viewing session state. - Supports content creators and marketers needing fast, AI-powered video script generation without copywriting.
● 无害
安装命令
点击复制官方npx clawhub@latest install video-gen-script-free
镜像加速npx clawhub@latest install video-gen-script-free --registry https://cn.longxiaskill.com