Pictory Ai

Skip the learning curve of professional editing software. Describe what you want — convert this blog post into a short branded video with captions and backgr...

This skill appears to do what it says — it will upload files you give it to a nemovideo.ai backend and use NEMO_TOKEN (or obtain an anonymous token) to render videos. Before installing or using it: 1) Be aware that any files (including potentially sensitive content) will be uploaded to https://mega-api-prod.nemovideo.ai — only use it for content you are comfortable sending to a third party. 2) Confirm the domain and service are legitimate and that you trust them; if unsure, use anonymous/free token or a throwaway account rather than a long-lived production token. 3) Note the metadata inconsistency: the registry lists no config paths but the SKILL.md mentions ~/.config/nemovideo/ — ask the publisher to clarify. 4) The skill may read install path information to set headers (could reveal local path info); if that concerns you, request a version that omits that behavior. 5) Because this is instruction-only with no code files, there's limited static analysis — if you need a higher assurance level, ask the publisher for a provenance statement or official documentation for the API endpoints and token handling.

Type: OpenClaw Skill Name: pictory-ai Version: 1.0.0 The skill provides a legitimate interface for AI video creation by integrating with the nemovideo.ai API. It manages authentication via the NEMO_TOKEN environment variable or an anonymous token generation process, and it handles video editing workflows through standard REST and SSE endpoints (e.g., /api/tasks/me/with-session/nemo_agent). While the skill checks for its installation path to set telemetry headers (X-Skill-Platform), its behavior is entirely consistent with its stated purpose of converting text to video, and it contains no evidence of data exfiltration, malicious execution, or harmful prompt injection.