📦 视频
v1.0.0Letter Maker Free 用此技能将照片或短片制成私人视频信。支持 MP4、MOV、JPG、PNG，单文件最大 200MB。日常用户与送礼者常用它……
0· 15·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
high confidenceThe skill's requirements and runtime instructions are coherent with a cloud-based video rendering service; it asks for a single API token and uses network calls to an external nemo video API to upload files and request renders.
评估建议
This skill appears to do what it says: it will upload files you provide to an external nemo video API and use a token called NEMO_TOKEN to authenticate. Before installing or using it, confirm you trust mega-api-prod.nemovideo.ai and are willing to upload any photos, videos, or audio you send. If you already have a NEMO_TOKEN stored in your environment, the skill will use it (so avoid putting long-lived or high-privilege credentials there unless intended). If no token is present, the skill will r...详细分析 ▾
✓ 用途与能力
The name/description (video letter maker) aligns with the declared requirement for a NEMO_TOKEN and the SKILL.md instructions to call the nemovideo.ai API to create and export videos. One minor inconsistency: the registry metadata lists no required config paths while the SKILL.md frontmatter includes a config path (~/.config/nemovideo/). This mismatch should be clarified but does not by itself indicate malicious intent.
ℹ 指令范围
The SKILL.md instructs the agent to (a) obtain or use a NEMO_TOKEN, (b) create a session and perform SSE/text-stream interactions, and (c) upload user-provided files (multipart or URL) to mega-api-prod.nemovideo.ai. These actions are expected for a cloud render service. Note: the skill will upload any files the user supplies to a third-party API and may read local file paths provided for upload — only provide files you consent to transmit.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest-risk install mechanism. Nothing is downloaded or written by an install step.
✓ 凭证需求
Only a single credential (NEMO_TOKEN) is required, which matches the described API usage. The SKILL.md also supports generating an ephemeral anonymous token via the service's anonymous-token endpoint when no env var is present; this is proportionate. The earlier-noted config path in frontmatter could be used to store session info — verify whether that behavior exists and whether it's documented.
✓ 持久化与权限
The skill does not request permanent/global presence (always:false) and has no install-time persistence. Aside from the frontmatter-configPath hint, there is no instruction to modify other skills or system-wide configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Video Letter Maker Free 1.0.0 — initial release - Create personal video letters from your photos, clips, and audio (MP4, MOV, JPG, PNG supported; up to 200MB) - Cloud-based AI processing delivers 1080p MP4 files in 1–2 minutes - Free token system (100 credits, 7-day expiry) enables easy access for new users - Supports editing with voiceovers, background music, and text overlays - Simple workflows for uploading, editing, and exporting video letters without local installs - Clear error handling, session management, and helpful usage tips included
● 无害
安装命令
点击复制官方npx clawhub@latest install video-letter-maker-free
镜像加速npx clawhub@latest install video-letter-maker-free --registry https://cn.longxiaskill.com镜像同步中