ClawHub

Auto Video

v1.0.0

Turn a 3-minute unedited screen recording into 1080p auto-edited videos just by typing what you need. Whether it's automatically editing raw footage into a f...

⭐ 0· 52·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required credential (NEMO_TOKEN), and the SKILL.md's API endpoints all align with a cloud video-editing service that uploads media and requests render jobs.
✓
Instruction Scope
The SKILL.md only instructs the agent to use NEMO_TOKEN (or obtain an anonymous token), create sessions, upload user-provided media, stream SSE events, and poll render status. It does not direct reading unrelated files or collecting unrelated credentials.
✓
Install Mechanism
This is an instruction-only skill with no install spec or code to write to disk, which minimizes install risk.
ℹ
Credentials
Requiring a single NEMO_TOKEN is proportionate to the claimed function. Minor inconsistency: the SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) and platform-detection via install path, but the registry metadata reported no required config paths. This mismatch is likely a metadata oversight but worth confirming (the skill may inspect install paths or look for local token files).
✓
Persistence & Privilege
The skill is not always-on, does not request system-wide modifications, and does not ask to alter other skills' configurations.
Scan Findings in Context
[no_code_to_scan] expected: The regex scanner found no code files because this is an instruction-only skill (SKILL.md contains the runtime instructions). That's expected but means behavior is defined entirely in prose rather than inspectable code.
Assessment
This skill appears to be what it claims: a cloud-based auto-editor that uploads user media and returns rendered videos. Before installing or enabling it, confirm you are comfortable with the service domain (mega-api-prod.nemovideo.ai) receiving your video/audio files and any metadata. Decide whether to provide a long-lived NEMO_TOKEN (which grants the service access) or allow the skill to obtain a short-lived anonymous token; prefer the least-privilege token and remove it after use. Also ask the publisher to fix the metadata mismatch (SKILL.md references a local config path that the registry did not list) so you know whether the agent will look for local config files. Finally, because this skill uploads your content to an external service, check the service's privacy/retention policy if your footage is sensitive.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dp5pkvzg846h63sb4hx19w984q0sw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments