ClawHub

Credit Collector

v1.0.0

Turn a 2-minute YouTube video with end credits into 1080p collected credit clips just by typing what you need. Whether it's extracting and compiling credit s...

⭐ 0· 50·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name/description (extracting and compiling video credits) matches the only requested credential (NEMO_TOKEN) and the documented API endpoints on mega-api-prod.nemovideo.ai. No unrelated binaries or unrelated credentials are requested.
ℹ
Instruction Scope
Instructions drive network calls to nemo's APIs (anonymous-token, session creation, upload, render, poll), and tell the agent to upload local video files — which is expected. One minor scope creep: the skill asks the agent to detect the install path for attribution (e.g., checking ~/.clawhub/ or ~/.cursor/skills/) which implies reading user filesystem paths outside the declared config path; this is small but worth noting. Otherwise the runtime steps stay within the declared purpose.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is downloaded or written to disk by an installer as part of the skill package — lowest install risk.
ℹ
Credentials
Only NEMO_TOKEN is declared as required (primary credential), which is appropriate for a hosted video service. The skill will auto-create an anonymous token if none is present and will store session_id (and implicitly use/store the token) for requests. Users should be aware anonymous tokens are issued by the remote service and expire after 7 days per the instructions.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It expects to store session identifiers and use tokens for API calls, which is normal for a remote-processing skill.
Assessment
This skill uploads your video files to a third-party service (mega-api-prod.nemovideo.ai) and either uses a NEMO_TOKEN you provide or will request an anonymous token on your behalf and store session state. Before installing, confirm you are comfortable with: (1) uploading potentially sensitive video content to that external domain, (2) the provider's privacy/retention and billing policies (no homepage provided here — consider asking the publisher for docs), and (3) how and where tokens/session IDs are stored on your system. If you have strict privacy requirements, prefer to supply a dedicated NEMO_TOKEN tied to an account you control (or avoid using the skill). Note the skill may read small install/config paths (for attribution) — if you want to avoid any filesystem checks, ask the publisher to remove or document that behavior. Because this is instruction-only, there is no installer risk, but network-based data exfiltration (uploads) is inherent to its function.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ecy9bs81fxdxyqd6az3zvrx84rn79

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments