ClawHub

Online Video Editor

v1.0.5

Turn raw, uncut footage into share-ready videos without installing a single app. This online-video-editor skill handles trimming, cutting, captioning, transi...

⭐ 0· 151·0 current·0 all-time
by@imo14reifey
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill is an online video editor and only requests a single service credential (NEMO_TOKEN) and cloud API endpoints that match that purpose. Required binaries are none and APIs described are consistent with cloud rendering, uploads, and exports.
ℹ
Instruction Scope
Instructions direct the agent to create/use a NEMO_TOKEN, open sessions, post SSE messages, upload files (by path or URL), and export renders — all expected for a remote video-editing service. They also instruct detection of install path for attribution headers and say to 'save session_id'; the doc doesn't specify where session state is persisted (in-memory vs disk). Because uploads may accept local file paths, the agent will handle user-supplied file reads and will transmit those files to the external nemovideo.ai endpoints.
✓
Install Mechanism
No install spec or packages — instruction-only skill. Nothing is downloaded or written by an installer, so install risk is low.
ℹ
Credentials
Only one credential (NEMO_TOKEN) is declared and used, which is appropriate for a third-party video-processing API. Minor inconsistency: the SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists none — this suggests the skill may read or write a local config file to persist tokens/sessions, which should be expected but is not fully documented.
ℹ
Persistence & Privilege
always is false and autonomous invocation is allowed (platform default). The skill implies storing session state and detecting installation paths for header attribution; that may cause it to read user dirs like ~/.clawhub/ or ~/.cursor/skills/ and possibly create or use ~/.config/nemovideo/. This is reasonable for a service client but worth noting because it gives the skill some local footprint.
Assessment
This skill appears to be a legitimate client for a cloud video-editing service and needs a single service token (NEMO_TOKEN). Before installing or using it: only provide NEMO_TOKEN if you trust nemo‑video/nemovideo.ai; don't upload sensitive files (uploads are sent to https://mega-api-prod.nemovideo.ai); be aware the skill may persist session tokens or state under ~/.config/nemovideo/ and may check install directories to set attribution headers. If you want tighter control, keep NEMO_TOKEN limited (use an anonymous/short-lived token), and avoid giving local file paths to anything you wouldn't want uploaded.

Like a lobster shell, security has layers — review code before you run it.

latestvk97c0caxkdc8m9g6kpmkxrrknh84d6sp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments