Text To Best

Get polished video clips ready to post, without touching a single slider. Upload your text prompt (TXT, DOCX, PDF, plain text, up to 500MB), say something li...

This skill appears to do what it says: it uploads your text and any files you provide to nemo's cloud API and returns rendered video URLs. Before installing or using it, consider: (1) NEMO_TOKEN (or an anonymous token) grants the skill access to the nemo service and any associated account credits — treat it like a credential. (2) Uploaded files and prompts are sent to https://mega-api-prod.nemovideo.ai — don't send sensitive private data unless you trust that service. (3) The SKILL.md and registry metadata disagree about a config path (~/.config/nemovideo/) — this is likely harmless but you may want to confirm what local files (if any) the skill will read. (4) No other external endpoints or unrelated credentials are requested. If you need stronger assurance, ask the publisher for a privacy policy or inspect network logs during a test run.

Type: OpenClaw Skill Name: text-to-best Version: 1.0.0 The text-to-best skill facilitates AI video generation by interacting with the nemovideo.ai API. It requires high-risk capabilities, including network access to mega-api-prod.nemovideo.ai, reading environment variables (NEMO_TOKEN), and uploading local files via multipart POST requests. While these functions are aligned with the stated purpose, the instructions in SKILL.md lack explicit input validation or path restrictions, creating a vulnerability where the agent could be manipulated into exfiltrating sensitive local files. This combination of broad file/network access and potential for exploitation warrants a suspicious classification.