Ffmpeg Audio Extract
v1.0.0Tell me what you need and I'll handle the rest — whether you're pulling a soundtrack from a movie clip or stripping narration from a recorded webinar. This f...
⭐ 0· 112·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (extract audio from video) match what the SKILL.md instructs: it calls NemoVideo APIs to upload videos and run FFmpeg server-side. Requiring a NEMO_TOKEN and a NemoVideo config path is proportional and expected.
Instruction Scope
Instructions direct the agent to read/create ~/.config/nemovideo/client_id, obtain or use NEMO_TOKEN, create a session, upload local video files (or URLs) to the NemoVideo API, and poll/trigger server-side renders. All network destinations are the declared NemoVideo endpoints. Two user-impacting behaviors to note: (1) uploads transmit entire video files to a third-party service (privacy exposure), and (2) the skill builds a workspace link that includes the token as a URL query parameter which can leak the token if the link is shared or logged. The SKILL.md does say "don't print tokens or raw JSON," but token handling and link construction still pose disclosure risk if not carefully handled.
Install Mechanism
Instruction-only skill with no install spec and no bundled code — nothing is written or executed beyond what the SKILL.md tells the agent to do at runtime. This minimizes install-time risk.
Credentials
Only NEMO_TOKEN is required (declared as primaryEnv) and a config path under ~/.config/nemovideo is referenced. Those are proportionate to a service that authenticates and stores a client_id locally for anonymous tokens.
Persistence & Privilege
always:false (not force-included). The skill asks to read/write its own config file (~/.config/nemovideo/client_id) and to save session_id in-session — behaviour consistent with its purpose. It does not request system-wide privileges or modify other skills.
Assessment
This skill sends your video files to nemovideo's servers and requires a service token (NEMO_TOKEN). Before installing, confirm you trust nemovideo.com and review their privacy/terms because uploaded videos may be stored or processed remotely. Prefer creating a short-lived or anonymous token (the skill supports that) rather than reusing long-lived credentials. Be careful sharing the generated workspace link — it embeds a token in the URL and could leak access if shared or logged. If you need to keep media private or cannot trust the remote service, consider running FFmpeg locally instead so no upload or external token is required. Finally, inspect ~/.config/nemovideo/client_id if it will be created, and revoke the token after use if possible.Like a lobster shell, security has layers — review code before you run it.
latestvk97695e695hsjyhzrnr6ymbszx83z8ez
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN