📦 Wedding — 婚礼
v1.0.0邀请视频 只需输入需求，即可将五张情侣照片和一段场地短片变成 1080p 婚礼邀请视频。无论是制作个性化婚礼邀请……
0· 20·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidenceThe skill's requirements and runtime instructions are coherent with a cloud video-rendering service that needs a NEMO_TOKEN; nothing indicates it is doing unrelated or hidden work, though there are minor metadata inconsistencies and some persistence behavior worth noting.
评估建议
This skill appears to do what it says: it uses a single service token (NEMO_TOKEN) to call a remote video-rendering API and manages sessions, uploads, and exports. Before installing, consider: 1) Do you trust the domain (mega-api-prod.nemovideo.ai) and the skill owner? 2) The skill will store a token/session_id for later use — if you prefer not to persist credentials, use an anonymous token with limited credits or clear/revoke the token after use. 3) The SKILL.md mentions a config path (~/.confi...详细分析 ▾
ℹ 用途与能力
Name/description match the runtime instructions: the skill calls a nemo video API to upload media, run SSE generation, and return a download URL. Requiring a single service token (NEMO_TOKEN) is proportionate. Minor inconsistency: the top-level registry metadata lists no required config paths, but the SKILL.md frontmatter advertises a config path (~/.config/nemovideo/). This mismatch should be clarified.
ℹ 指令范围
SKILL.md stays on task (session creation, upload, SSE, render/export). It instructs generating an anonymous token if none is present, creating and saving a session_id, uploading files via multipart or URLs, and polling export status. A small scope creep: it uses the agent's install path to set an X-Skill-Platform header (reads install path to infer platform) and instructs saving tokens/session IDs — both are plausible for attribution and operation but are actions the user should be aware of.
✓ 安装机制
No install spec and no code files — instruction-only. Lowest-risk install footprint.
ℹ 凭证需求
Only NEMO_TOKEN is declared and used as the API credential, which is appropriate. The SKILL.md frontmatter also references a config path (~/.config/nemovideo/), which the registry summary did not list; this discrepancy should be resolved. The skill does not request unrelated credentials.
ℹ 持久化与权限
always:false and autonomous invocation defaults are normal. The skill explicitly instructs storing the anonymous token (data.token) as NEMO_TOKEN and saving session_id; this implies persistent credential/state storage within the agent environment. That is functionally reasonable for resumable render jobs but increases the importance of token lifecycle management (revocation, expiry).
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Wedding Invitation Video skill version 1.0.0 - Initial release: create custom 1080p wedding invitation videos from user-uploaded photos and venue clips with simple instructions. - Automatic setup: connects to cloud API, supports anonymous login with free credits for new users. - Streamlined workflow: upload files, describe your request, and receive a ready-to-share MP4 in 1–2 minutes. - User-friendly commands: export, check credits, view status, or upload files using natural language. - Designed for easy social sharing; portrait photo support and quick rendering on cloud GPUs. - Robust error handling for missing credits, token issues, unsupported files, and rate limits.
● 无害
安装命令
点击复制官方npx clawhub@latest install wedding-invitation-video
镜像加速npx clawhub@latest install wedding-invitation-video --registry https://cn.longxiaskill.com镜像同步中