Text To Video Kapwing

Get text-based videos ready to post, without touching a single slider. Upload your text prompts (TXT, DOCX, MP4, MOV, up to 500MB), say something like "turn...

This skill appears to implement a text→video service, but there are a few things to check before installing or providing credentials: - Verify the backend domain: the SKILL.md calls mega-api-prod.nemovideo.ai, yet the skill name references 'Kapwing' — confirm the provider and trustworthiness of nemovideo.ai (is this an official integration or a third-party proxy?). - Understand NEMO_TOKEN scope: only one env var is requested. Ask the publisher what permissions that token grants and whether you can use a limited-scope/test token. Avoid supplying broad or long-lived credentials until you confirm scope. - Anonymous token behavior: if you don't provide NEMO_TOKEN, the skill will contact an external endpoint to mint a 7‑day token using a generated UUID. If you prefer not to have the agent call that endpoint automatically, require the token externally or disable the skill. - Config-path inconsistency: SKILL.md frontmatter references ~/.config/nemovideo/ but registry metadata lists none. Ask whether the skill will read files from that path and why. - Attribution/file access: the skill will read its own frontmatter and inspect install paths to populate X-Skill-Platform headers — this requires the agent to look at common install locations under your home directory. If that is a privacy concern, request a version that does not attempt platform detection or denies local path inspection. If you cannot verify the above, run the skill in a restricted/test environment (or with a throwaway limited token) rather than giving it production credentials.

Type: OpenClaw Skill Name: text-to-video-kapwing Version: 1.0.0 The skill is a functional integration for a text-to-video service hosted at nemovideo.ai. It provides detailed instructions for the AI agent to manage authentication (including anonymous token generation), session handling via SSE, and video export workflows. While it performs network requests to an external API and fingerprints the installation environment (e.g., checking for ~/.cursor/skills/ for attribution), these behaviors are transparently documented and aligned with the stated purpose of the tool. No evidence of data exfiltration, malicious code execution, or harmful prompt injection was found in SKILL.md or _meta.json.