Free Youtube Video Tiktok
v1.0.0Get short TikTok clips ready to post, without touching a single slider. Upload your YouTube or video clips (MP4, MOV, WebM, AVI, up to 500MB), say something...
⭐ 0· 58·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the instructions: upload video, create session, render/export via nemovideo.ai. Requested credential (NEMO_TOKEN) is appropriate for an external API. Minor inconsistency: the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths.
Instruction Scope
Instructions direct the agent to upload user-supplied video files and associated render commands to https://mega-api-prod.nemovideo.ai and to poll for results — this is expected for a cloud render service. The skill also auto-generates an anonymous token if no NEMO_TOKEN is present (by POSTing with a generated UUID). No instructions ask the agent to read unrelated files or extra environment variables, but the skill will transmit potentially sensitive user content to a third-party service, which is a privacy consideration.
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is the lowest-risk install profile.
Credentials
Only NEMO_TOKEN is declared as required, which is proportionate to calling a protected API. However, SKILL.md references a config path (~/.config/nemovideo/) not present in the registry's 'required config paths' field — a small metadata mismatch. The skill will also read NEMO_TOKEN from the environment or obtain an anonymous token from the remote API if absent.
Persistence & Privilege
The skill is not 'always: true' and does not request elevated persistence or global configuration changes. It can be invoked by the agent normally; that is the expected behavior.
Scan Findings in Context
[no_regex_findings] expected: The static regex scanner found nothing to analyze because this is an instruction-only skill (no code files). That is expected, but absence of findings is not proof of safety — runtime behavior depends on calls to the external API described in SKILL.md.
Assessment
This skill appears to do what it says: it uploads your videos to nemovideo.ai and uses a NEMO_TOKEN (or an anonymously acquired starter token) to create sessions and render TikTok-ready clips. Before installing or using it: 1) Be aware your uploaded media will be sent to an external service — don't upload private/sensitive content unless you trust the service. 2) Check the reputation/privacy policy of nemovideo.ai and confirm how long uploads/derivatives are retained. 3) Note the small metadata mismatch about a config path (~/.config/nemovideo/) — ask the maintainer which local files, if any, the skill will access. 4) Prefer using a limited-scope or disposable token if you don’t want to expose long-lived credentials. If you need higher assurance, request source code or an official homepage from the publisher before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk972mq92wby1w32hjvpxtwc44h84nzea
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN