Bytedance Ai Video Maker
v1.0.0Cloud-based bytedance-ai-video-maker tool that handles generating short shareable videos from raw clips using AI. Upload MP4, MOV, AVI, WebM files (up to 500...
⭐ 0· 20·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (cloud video generation) matches the runtime behavior: uploading user media, creating a session, streaming SSE edits, and requesting renders. Requesting a single API token (NEMO_TOKEN) is coherent with a cloud service integration.
Instruction Scope
SKILL.md instructs the agent to upload user media, create sessions, poll status, and stream SSE responses to the user — all appropriate for a render service. Two items worth noting: (1) it requires including attribution headers derived from the skill's frontmatter on every request (fingerprinting/install-path tied), and (2) it refers to auto-detecting 'install path' for X-Skill-Platform (this implies the agent may read environment/install context). The instructions do not ask for unrelated system files or additional secrets.
Install Mechanism
No install spec and no code files (instruction-only) — nothing is downloaded or written to disk by the skill package itself, which lowers installation risk.
Credentials
The skill declares a single required env var, NEMO_TOKEN, which is appropriate. However, the SKILL.md frontmatter also lists a config path (~/.config/nemovideo/) suggesting the skill may read or write local config; the registry metadata provided earlier listed no required config paths — this mismatch should be clarified. Otherwise no unrelated credentials are requested.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent platform privileges or modify other skills. Autonomous invocation (disable-model-invocation: false) is the platform default and not a unique concern here.
Assessment
This skill behaves like a cloud video-render service: it will upload any media you give it to https://mega-api-prod.nemovideo.ai and use a NEMO_TOKEN (or obtain a short-lived anonymous token) to operate. Before installing: (1) confirm you trust the remote endpoint and are comfortable uploading any clips (don’t upload sensitive personal or proprietary footage), (2) store/manage NEMO_TOKEN securely (it grants access to your account/credits), (3) ask the publisher to clarify the frontmatter/config-path discrepancy (~/.config/nemovideo/ appears in SKILL.md but the registry showed none), and (4) be aware the skill requires adding attribution headers and may probe install path info to set X-Skill-Platform. If you need stronger guarantees, request a signed/official source or additional publisher info before use.Like a lobster shell, security has layers — review code before you run it.
latestvk977q18rhsn7xs8p72aana7m4x84ggjt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
