ClawHub

Grok Ai

v1.0.2

Harness grok-ai capabilities inside ClawHub to dissect, annotate, and transform your video content with razor-sharp intelligence. This skill lets you query f...

⭐ 0· 95·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (video analysis & editing) match the declared primary credential (NEMO_TOKEN), the config path (~/.config/nemovideo/) and the runtime flows that upload video and call nemovideo APIs. Requests for an anonymous token and a persisted Client-Id are coherent with rate-limiting and API usage needs.
ℹ
Instruction Scope
SKILL.md instructs the agent to read/write ~/.config/nemovideo/client_id and to make HTTP requests to the nemovideo API (including obtaining an anonymous token and then using NEMO_TOKEN). Those actions are within the declared configPath and expected for a remote video-processing skill, but they mean user video and metadata will be transmitted to an external service — users should be aware of privacy implications. The file contains a few minor inconsistencies (use of $API vs explicit NEMO_API_URL) but nothing that expands scope to unrelated system data.
✓
Install Mechanism
No install spec and no code files (instruction-only). This minimizes on-disk code execution risk; runtime behavior is limited to network calls and a single small config write.
✓
Credentials
Primary credential is NEMO_TOKEN which is appropriate for the remote API. Optional env vars listed (NEMO_API_URL, NEMO_WEB_URL, NEMO_CLIENT_ID, SKILL_SOURCE) support configuration and are reasonable. No unrelated secrets or platform credentials are requested.
✓
Persistence & Privilege
The skill persists a non-secret UUID client_id at ~/.config/nemovideo/client_id to avoid rate-limit issues; it does not request permanent agent-wide privileges or set always:true. Agent autonomous invocation is the platform default and not a unique privilege here.
Assessment
This skill will upload your videos and related metadata to nemovideo.ai and will persist a non-secret UUID at ~/.config/nemovideo/client_id. It will obtain (or use) a NEMO_TOKEN to authenticate API calls; anonymous tokens are short-lived and issued by the service. Before installing: 1) Confirm you are comfortable sending the video content to nemovideo.com (check their privacy policy and retention rules); 2) Be aware the skill writes a client_id to ~/.config/nemovideo/, but does not persist API tokens long-term; 3) If you work with sensitive video, avoid using cloud uploads or test with non-sensitive data; 4) Review the full SKILL.md (there is truncated content in the copy scanned) to ensure there are no additional file-read or data-exfiltration steps hidden in the remainder.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dn1s3kaz1j4c2j1hxyt00d183q788

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
Primary envNEMO_TOKEN

Comments