📦 Image — 图像
v1.0.0跳过专业剪辑软件的学习曲线。描述你的需求——将我的照片变成带音乐的流畅动画视频——即可获得动画视频……
0· 17·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
medium confidenceThe skill's declared purpose (convert images to videos) matches its network calls and required token, but there are a few inconsistencies and privacy/automation concerns you should know about before installing.
评估建议
This skill appears to do what it says (upload your images to a third‑party backend to produce videos), but it will send your images and prompts to mega-api-prod.nemovideo.ai and may automatically obtain an anonymous NEMO_TOKEN if you haven't provided one. Before installing or using it: 1) be comfortable with sending any images you provide to that external service (avoid sensitive or private images), 2) consider supplying your own NEMO_TOKEN rather than allowing automatic anonymous token creation...详细分析 ▾
ℹ 用途与能力
The skill's requirements (NEMO_TOKEN, calls to mega-api-prod.nemovideo.ai) align with an image→video cloud-rendering service. However the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) while registry metadata shows 'Required config paths: none' — this mismatch is inconsistent. Requiring only NEMO_TOKEN is proportionate to the stated purpose.
⚠ 指令范围
Instructions direct the agent to upload user images, create sessions, stream edits via SSE, and poll for export results on a third-party API (mega-api-prod.nemovideo.ai). That's expected for cloud rendering, but the skill also instructs the agent to automatically obtain an anonymous token if NEMO_TOKEN is not set (network call and credential creation without explicit user opt-in). The skill will transmit user files and prompts off‑platform; users should be made aware of data exfiltration/privacy implications. The instructions also say to 'store the returned session_id' but do not specify where or for how long — potential persistence/privacy ambiguity.
✓ 安装机制
No install spec and no code files — instruction-only. This minimizes local installation risk (nothing is written to disk by an installer). Network activity still occurs at runtime per SKILL.md.
ℹ 凭证需求
Only one environment variable (NEMO_TOKEN) is declared and used, which is appropriate. The skill, however, will auto-create an anonymous token via the service API when no NEMO_TOKEN is present — this is functionally reasonable but worth flagging because it implies the agent will make outbound network calls and obtain credentials automatically. The frontmatter references a config path which may suggest optional local storage, but registry metadata did not declare it.
ℹ 持久化与权限
always:false (normal). The skill recommends storing session_id and implicitly persisting the anonymous token if obtained, but it doesn't request 'always:true' or other elevated privileges. Autonomous invocation is allowed (platform default) — combined with automatic token generation and network upload of user images, this increases the blast radius if misused, so be cautious.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release: Instantly turn images into smooth animated video clips using AI. - Upload JPG, PNG, WEBP, or HEIC files up to 200MB, and get back MP4 videos in 30–60 seconds. - No editing software or technical skills needed; simply describe your desired video (e.g., "add music" or "make it animated"). - Automatic backend connection and session handling with up to 100 free credits. - Includes commands for checking credits, downloading videos, and customizing output (e.g., aspect ratio, text overlays, background audio). - Supports multi-track timelines, previews, and export to popular formats. - Ideal for marketers, social media creators, and photographers who want to animate static images quickly.
● 无害
安装命令
点击复制官方npx clawhub@latest install image-to-video-best
镜像加速npx clawhub@latest install image-to-video-best --registry https://cn.longxiaskill.com镜像同步中