Easy Video Editing
v1.0.0Cloud-based easy-video-editing tool that handles quickly trimming and enhancing casual video recordings. Upload MP4, MOV, AVI, WebM files (up to 500MB), desc...
⭐ 0· 20·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description align with the runtime instructions: the skill calls a cloud video-editing API and requires a single service token (NEMO_TOKEN). The declared primary credential (NEMO_TOKEN) and the API endpoints in SKILL.md are coherent with a cloud editing service.
Instruction Scope
Instructions are focused on session creation, SSE streaming, uploading user video files, checking credits/state, and exporting—all expected for this purpose. Two items to note: (1) the skill auto-generates an anonymous token if NEMO_TOKEN is not set (it will contact the external API and receive a token valid for 7 days), and (2) the instructions explicitly tell the agent not to show raw API responses or token values to the user. Neither is inherently malicious but both affect transparency and privacy and merit user awareness.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is the lowest-risk install mechanism.
Credentials
Only one credential is requested (NEMO_TOKEN), which is appropriate for an API-based editing service. The SKILL.md also documents generating an anonymous token when NEMO_TOKEN is absent; this behavior is reasonable for convenience but means the skill will perform outbound auth calls and obtain a short-lived credential on behalf of the user.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or systemwide config, and only asks to persist a session_id for the editing session. This is proportionate for a cloud-job workflow.
Assessment
This skill appears to do what it says: upload user video files to a cloud service and return edited outputs, using a single service token (NEMO_TOKEN). Before installing consider: 1) The backend domain (mega-api-prod.nemovideo.ai) is external and the skill will upload your video content to that service — verify you trust the provider and its privacy policies. 2) If you don't provide NEMO_TOKEN, the skill will automatically request an anonymous token from the service (it will perform outbound network calls and obtain a 7‑day token). 3) The SKILL.md asks the agent to hide raw API responses and token values from the user; this reduces visibility into what the service returns. 4) The SKILL.md frontmatter references a config path (~/.config/nemovideo/) while the registry metadata listed none — a minor inconsistency to confirm with the publisher. If you need stronger assurance, ask the publisher for a homepage, documentation, or source code, and confirm the data retention/privacy policy for uploaded videos.Like a lobster shell, security has layers — review code before you run it.
latestvk9743f06jaagjhw2t906xm98rs84kf2z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✂️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN