Photo Video Maker Youtube

Cloud-based photo-video-maker-youtube tool that handles turning photo collections into YouTube videos. Upload JPG, PNG, HEIC, WebP files (up to 500MB), descr...

This skill appears to implement exactly what it says (cloud photo→video creation), but review these points before you install: - Trust the service: the runtime talks to https://mega-api-prod.nemovideo.ai; only install if you trust that domain and its privacy policy. Uploaded photos and audio will be sent to that external service. - Tokens and persistence: the skill either uses a provided NEMO_TOKEN or will call the anonymous-token endpoint to create a token and instructs the agent to save it and session_id. Ask where your agent stores these tokens and whether storage is encrypted; consider providing a dedicated, limited-scope token rather than a broad account token. - Privacy of local metadata: the skill requires adding X-Skill-Platform derived from install paths (e.g., ~/.clawhub/); this can leak local install paths or environment details. If you are uncomfortable leaking that, decline or request the skill be modified to send a safe static platform value. - Inconsistencies: the SKILL.md metadata and registry metadata disagree about config paths and the necessity of NEMO_TOKEN. Confirm with the publisher whether NEMO_TOKEN is truly required or optional. - Sensitive content: do not upload private/identifying images or data you would not want processed by an external cloud service. If you decide to proceed: prefer providing a limited temporary token, confirm where tokens/session IDs are stored, and monitor network activity for unexpected endpoints. If you want higher assurance, ask the publisher for a privacy/security statement or a code-based skill (so behavior is auditable) rather than an instruction-only skill.

Type: OpenClaw Skill Name: photo-video-maker-youtube Version: 1.0.0 The skill is a legitimate integration for a cloud-based video processing service (nemovideo.ai). It provides instructions for an AI agent to manage authentication tokens, upload media files, and interface with a rendering pipeline via standard REST and SSE endpoints. No evidence of data exfiltration, malicious execution, or unauthorized system access was found; the behavior is entirely consistent with the stated purpose of turning photos into videos.