ClawHub

Instagram Video Caption

v1.0.4

Automatically generate and burn captions into Instagram videos — Reels, Stories, and IGTV. NemoVideo transcribes speech with word-level timing, styles captio...

⭐ 0· 119·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description are consistent with the runtime instructions: the SKILL.md issues a POST to a NemoVideo API to generate captions and expects an API token (NEMO_TOKEN). Requiring an API token is appropriate for a cloud captioning service. The metadata's config path (~/.config/nemovideo/) is plausible for storing settings but is not referenced in the instructions — this is a minor mismatch worth noting.
✓
Instruction Scope
Instructions are scoped to uploading videos/audio, specifying caption styles, and receiving processed media from the NemoVideo API. The example curl uses Authorization: Bearer $NEMO_TOKEN and transmits the video to mega-api-prod.nemovideo.ai. There are no instructions to read unrelated system files, environment variables beyond NEMO_TOKEN, or to exfiltrate data to unexpected endpoints. Note: user media (video/audio) and transcription text are transmitted to an external service as part of normal operation.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by the skill itself. Lowest-risk install profile.
ℹ
Credentials
The declared primary credential NEMO_TOKEN is appropriate for a cloud API. However, registry metadata listed 'Required env vars: none' while also declaring primaryEnv: NEMO_TOKEN and a config path (~/.config/nemovideo/). This inconsistency is small but should be clarified: the skill will need the NEMO_TOKEN to call the API, and the config path suggests the skill or associated tooling may read or store settings there.
✓
Persistence & Privilege
always is false and the skill is user-invocable. The skill does not request permanent/force-included presence or system-wide changes in the provided instructions.
Assessment
This skill will upload your video and audio to NemoVideo's API using an API token (NEMO_TOKEN). Before installing or using it: (1) Confirm the API domain (mega-api-prod.nemovideo.ai) and the homepage/repository are legitimate and match the vendor you expect. (2) Only use a token with the minimal necessary scope; do not paste full-account credentials if a scoped token is available. (3) Be aware that uploading videos transmits potentially sensitive audio/video and derived transcriptions — review NemoVideo's privacy/data retention policy before sending private footage. (4) Note the metadata references ~/.config/nemovideo/ — check that directory for stored credentials and ensure you manage/rotate tokens there if used. (5) Test with non-sensitive sample media first. If you need higher assurance, ask the publisher to clarify the metadata inconsistency (declared required env vars = none vs primaryEnv present) and provide a link to a published SDK or docs showing how tokens are stored/used.

Like a lobster shell, security has layers — review code before you run it.

latestvk9786v04gj7m0h6bfcq5f6mrj183v364

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📸 Clawdis
Primary envNEMO_TOKEN

Comments