💋 Ai Video Maker Free Kiss — 浪漫视频生成
v1.0.0一键将图片或短片合成为浪漫风格视频，支持 MP4、MOV、JPG、PNG，最大 500MB，情侣与婚礼创作者最爱。
0· 59·0 当前·0 累计
by 下载技能包
最后更新
2026/4/13
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill will upload photos and videos you provide to an external service (mega-api-prod.nemovideo.ai) for cloud-based rendering. It will accept either a NEMO_TOKEN you set or obtain an anonymous token on your behalf and then send your media — so it can operate without a user-supplied credential. Before installing or using: 1) Confirm you trust the external domain and understand its privacy/retention policy; avoid uploading sensitive images. 2) Note the SKILL.md includes a config path (~/.conf...详细分析 ▾
✓ 用途与能力
Name/description align with runtime instructions: the SKILL.md describes creating videos from photos/clips via a remote API (upload, render, export). The required NEMO_TOKEN credential and the listed endpoints are coherent with a cloud video service.
⚠ 指令范围
Instructions explicitly instruct the agent to upload user files (multipart file paths or URLs) and to call remote endpoints that will process media. They also describe generating an anonymous token (UUID + POST) if no NEMO_TOKEN is present, which allows the skill to obtain credentials and transmit user files to the remote service without the user having provided a token. The file-upload examples use local filesystem paths (e.g. files=@/path) which implies the agent may need to access local files; the instructions do not clearly constrain or warn about transmitting sensitive content. Overall the scope is consistent with the stated purpose but carries notable privacy/exfiltration risk and lacks explicit user-consent guidance.
✓ 安装机制
No install spec or code files are present (instruction-only), so nothing will be written to disk by an installer. This lowers execution-surface risk. There is no download-from-URL or package install to evaluate.
ℹ 凭证需求
The skill declares a single primary env var (NEMO_TOKEN), which is appropriate for a third-party API. However, the SKILL.md frontmatter metadata also lists a config path (~/.config/nemovideo/) while the registry metadata reports no required config paths — an inconsistency. Also, the skill can obtain an anonymous token automatically, meaning it does not strictly need the user's credential to function; that design increases the chance it will send data to the external service even if the user has not provided credentials.
✓ 持久化与权限
always is false and there is no install-time persistence. The skill is user-invocable and allows autonomous invocation (default platform behavior), which is normal; there is no evidence it attempts to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/13
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install ai-video-maker-free-kiss
镜像加速npx clawhub@latest install ai-video-maker-free-kiss --registry https://cn.longxiaskill.com