Photo Video Maker For Beginners

beginners and casual creators turn photos and images into slideshow MP4 video using this skill. Accepts JPG, PNG, HEIC, WebP up to 200MB, renders on cloud GP...

Before installing or using this skill, consider: - Privacy: The skill uploads your photos to https://mega-api-prod.nemovideo.ai for processing. Do not upload sensitive images unless you trust that service and understand their retention/deletion policy. - Token behavior: If you don't provide NEMO_TOKEN, the skill will mint an anonymous token for you by calling the service. Ask whether that token is stored locally or sent elsewhere, and how long it remains valid (SKILL.md says 7-day expiry / 100 free credits). - Local-path attribution: The skill constructs X-Skill-Platform by inspecting install paths (e.g., ~/.clawhub/). Confirm whether the agent will read filesystem paths and whether that could leak local environment details. - Inconsistencies: The metadata and instructions disagree about config paths and about whether NEMO_TOKEN is required or auto-created. Ask the publisher to clarify these points and provide a privacy/security statement or homepage before uploading personal content. - Test safely: If you proceed, test with non-sensitive images first to confirm behavior (where files are uploaded, whether tokens appear in logs, and whether download URLs are time-limited). If you need a higher-assurance decision, request: a publisher homepage/privacy policy, explicit explanation of token storage, and confirmation that image data is deleted after processing or retained only with user consent.

Type: OpenClaw Skill Name: photo-video-maker-for-beginners Version: 1.0.0 The skill is a legitimate integration for a cloud-based video generation service (nemovideo.ai). It provides instructions for the AI agent to handle API authentication, session management, and file uploads to transform photos into videos. While it includes logic for automated token acquisition and platform detection (identifying if it's running in ClawHub or Cursor), these actions are transparently documented and aligned with the stated purpose of the tool. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.