Video Caption Generator Ai Ab2n 0330
v1.0.0Tell me what you need and I'll generate precise, readable captions for your video in seconds. This video-caption-generator-ai skill transcribes spoken dialog...
⭐ 0· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (video captioning) align with the runtime instructions and required artifact: it calls the NemoVideo API, requires a NEMO_TOKEN, and references ~/.config/nemovideo/ for client state. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md instructs the agent to use NEMO_TOKEN, create a ~/.config/nemovideo/client_id (UUID) if missing, request an anonymous token from the service, create sessions, upload files or URLs, and include attribution headers. These steps are within the captioning workflow, but the guidance also tells the agent to produce a claim URL that embeds the token (e.g., ?token=$TOKEN) which may expose the token in logs or browser history — this is a privacy risk to be aware of.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is downloaded or written by an install step beyond the described config file creation at runtime. This is the lowest-risk install model.
Credentials
Only a single service credential (NEMO_TOKEN) is required and declared as the primaryEnv. That is proportionate for a remote transcription/upload service. The skill may create a local client_id and will use the token for bearer authorization; no unrelated secrets are requested.
Persistence & Privilege
always:false (normal). The skill will create/modify a file under ~/.config/nemovideo/ (client_id) if needed — reasonable for client state but it is a persistent write to the user profile. The skill otherwise does not request elevated or cross-skill privileges.
Assessment
This skill appears to do what it says: call NemoVideo to transcribe and return captions. Before installing or using it, consider: 1) NEMO_TOKEN (or an anonymous token it creates) is sent as a Bearer token for all API calls — only provide a token you trust the service with. 2) The skill may write a client_id to ~/.config/nemovideo/, which is persistent. 3) The skill constructs a claim URL that embeds the token in a query parameter — sharing that link or logs could leak your token. 4) You will be uploading video content to an external service; avoid sending sensitive or private videos unless you accept that. 5) If you need tighter control, create a scoped/temporary token or use an account with limited credits, and consider removing the token after use. If you want more assurance, ask the publisher for a privacy/data-retention policy or test with non-sensitive videos first.Like a lobster shell, security has layers — review code before you run it.
latestvk97fb56903njrnffxmqtc6fbz983xrs7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN