Unlimited Video Editing With
v1.0.0content creators and marketers edit raw video clips into polished edited clips using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB, renders on cloud GP...
⭐ 0· 59·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (cloud video editing, render on GPUs) align with the actions and endpoints in SKILL.md. Requesting NEMO_TOKEN and using a remote render API at mega-api-prod.nemovideo.ai is consistent with the advertised purpose. Minor mismatch: SKILL.md lists a few additional accepted formats (mkv, mp3, etc.) beyond the short description, but this is not security-critical.
Instruction Scope
Instructions are focused on session creation, SSE messaging, upload, credits, state, and export flows for the remote API. They include two small scope-creep items: (1) read this file's YAML frontmatter for attribution and (2) detect install path (~/.clawhub, ~/.cursor) to set X-Skill-Platform — both require reading local paths but are confined to the skill file and common install locations. The skill also instructs generating an anonymous token if NEMO_TOKEN is absent, which is coherent for anonymous access.
Install Mechanism
No install spec or downloadable artifacts are present (instruction-only). No archives, external installers, or package pulls — lowest install risk.
Credentials
Only one required env var (NEMO_TOKEN / primary credential) is declared and used. SKILL.md describes falling back to an anonymous-token endpoint if not present, which is reasonable. Metadata references a config path (~/.config/nemovideo/) which could allow reading service config, but the runtime instructions do not require other unrelated credentials.
Persistence & Privilege
The skill does not request always:true, does not alter other skills or system-wide settings, and has no install-time persistent agent modifications. It can be invoked autonomously (default), which is platform normal and not flagged alone.
Assessment
This skill sends your uploaded video files and editing instructions to https://mega-api-prod.nemovideo.ai and uses NEMO_TOKEN (or an anonymously obtained short-lived token) to authorize requests. Before installing or using it, consider: 1) Are you comfortable uploading potentially sensitive video/audio to that external service? 2) If you supply a persistent NEMO_TOKEN, treat it like a password — only provide a token you control, and rotate/revoke it if needed. 3) The skill will read its own frontmatter and may check common install paths in your home directory to set an attribution header; if you want to avoid any local file reads, don’t use the skill. 4) If you need stricter control, prefer providing an ephemeral anonymous token for single sessions and confirm your organization’s data-sharing policy. Overall the skill appears internally consistent, but review the service’s privacy/terms before sending private media.Like a lobster shell, security has layers — review code before you run it.
latestvk97dw6tfjn6sagek93yzpgjw4584mn36
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✂️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN