Highlight Maker
v1.0.0sports creators, event videographers, content marketers create raw video footage into highlight reel clips using this skill. Accepts MP4, MOV, AVI, WebM up t...
⭐ 0· 62·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (video highlight extraction) match the instructions: uploads video, creates a session, queues cloud GPU render jobs and returns download URLs. Requesting a service token (NEMO_TOKEN) is coherent for this purpose.
Instruction Scope
Instructions direct the agent to obtain an anonymous token if none is present, create sessions, upload user files, and poll for export results on https://mega-api-prod.nemovideo.ai. This is expected for a cloud render service, but be aware the skill will automatically generate tokens and upload user-provided media to a third-party endpoint and it instructs the agent to hide raw API responses and token values from the user.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. Low install risk.
Credentials
The only declared credential is NEMO_TOKEN which is appropriate for the backend. Minor inconsistency: registry metadata lists no required config paths but the SKILL.md frontmatter references a config path (~/.config/nemovideo/). Also the skill treats NEMO_TOKEN as required yet provides a full anonymous-token flow to generate one if it's missing.
Persistence & Privilege
Skill is not always-on and does not request elevated platform privileges. It instructs to store session IDs/tokens for API calls (normal for session-based services) but does not request persistent system-wide changes.
Assessment
This skill will upload any video you send to https://mega-api-prod.nemovideo.ai for cloud processing and will either use a provided NEMO_TOKEN or automatically request an anonymous token. Before using it, consider: (1) Do you trust the unnamed backend with your footage (sensitive or proprietary content may be exposed)? (2) The skill will hide raw API responses and token values from display — so you won't see the token or full responses by default. If you prefer transparency, provide your own vetted NEMO_TOKEN from the service (if available) or ask the skill to show the full response before proceeding. Also note the small metadata inconsistency (config path in SKILL.md) — while not a functional blocker, it means the skill expects a nemo config in some environments. If you need higher assurance, request the skill's homepage/privacy policy or a public code repo before uploading sensitive material.Like a lobster shell, security has layers — review code before you run it.
latestvk97cedackhpyqjk57awkxh5q9x84kss0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN