Instagram Video Editing With
v1.0.0Cloud-based instagram-video-editing-with tool that handles editing and formatting videos for Instagram Reels and Stories. Upload MP4, MOV, AVI, WebM files (u...
⭐ 0· 63·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description (cloud-based Instagram video editing) align with the declared requirement (NEMO_TOKEN) and the SKILL.md API calls to mega-api-prod.nemovideo.ai. No unrelated credentials or binaries are requested.
Instruction Scope
Instructions focus on creating a session, uploading video files, sending SSE messages, polling render status, and downloading results. They instruct reading NEMO_TOKEN from the environment or obtaining an anonymous token from the service if absent. Minor note: the skill uses install-path detection to set an attribution header (X-Skill-Platform) and references a config path (~/.config/nemovideo/); this is not dangerous for the stated purpose but means the agent may inspect those paths or environment values to build headers.
Install Mechanism
Instruction-only skill with no install spec or code files — no archives/binaries are downloaded or written by the skill itself.
Credentials
Only one environment variable is declared (NEMO_TOKEN) and used. The skill will request an anonymous token from the service if NEMO_TOKEN is not provided. The declared config path (~/.config/nemovideo/) is plausible for storing service config; no unrelated secrets or system credentials are requested.
Persistence & Privilege
always is false and there is no install-time persistence. The skill uses ephemeral session tokens for render jobs; it does not request elevated agent-level privileges or modify other skills' configs.
Assessment
This skill appears to do what it claims: it will upload video files to mega-api-prod.nemovideo.ai, create sessions, and return download URLs. Before installing/use: (1) Confirm you trust the nemovideo.ai domain and its privacy policy, since uploaded videos are sent to that cloud service. (2) Only provide NEMO_TOKEN for this service (do not reuse sensitive tokens from other services). (3) Be aware the skill can obtain an anonymous token automatically if NEMO_TOKEN is missing (it will call the listed auth endpoint). (4) Avoid uploading sensitive or private content unless you accept that it will be processed by the remote service. If you want higher confidence, ask the publisher for a homepage, source, or privacy/retention details for uploaded media.Like a lobster shell, security has layers — review code before you run it.
latestvk974r18v2d4r49b9s5twv60fnx84nerq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📱 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
