Subtitle Gen
v1.0.0generate video files into captioned video files with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. YouTubers and content creators use it for...
⭐ 0· 27·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (generate captioned videos) aligns with the runtime instructions (upload video, create session, SSE for edits, start render, download URL). Requesting a single service token (NEMO_TOKEN) is expected. Minor note: SKILL.md frontmatter lists a config path (~/.config/nemovideo/) that the registry metadata did not declare — this discrepancy should be clarified but does not by itself contradict the stated purpose.
Instruction Scope
Instructions focus on connecting to the remote rendering API, uploading files, monitoring SSE, and exporting rendered MP4s — all within the advertised scope. The skill describes how to obtain an anonymous token if NEMO_TOKEN is not present; it does not instruct reading unrelated system files or other credentials. It does ask the agent to 'auto-detect' an install platform from the install path to populate an attribution header, which could require access to the agent's install path — this is a limited scope action but worth noting.
Install Mechanism
No install spec and no code files (instruction-only) — lowest-risk installation footprint. The skill performs network calls to an external API, but that's expected for a cloud-render service.
Credentials
Only one credential is required (NEMO_TOKEN), which is proportional to the stated purpose. However, SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists none; this mismatch should be resolved to understand whether the agent will attempt to read that local config directory. Otherwise, environment access is limited.
Persistence & Privilege
Skill is not always-enabled and does not request elevated or persistent platform privileges. Autonomous invocation is allowed (platform default) but not combined with other red flags.
Assessment
This skill appears to do what it says: upload videos to a remote rendering service and return captioned MP4s, and it needs a NEMO_TOKEN to authorize requests. Before installing, confirm you trust mega-api-prod.nemovideo.ai and are comfortable uploading your videos to that service. Ask the publisher to clarify the config-path discrepancy (~/.config/nemovideo/) — know whether the agent will read that directory or only use the NEMO_TOKEN environment variable. If you test it, use non-sensitive videos first and prefer using an anonymous starter token (not your long-lived credentials). If you supply a long-lived NEMO_TOKEN, consider rotating it after use and review the service's privacy/retention policy.Like a lobster shell, security has layers — review code before you run it.
latestvk978p8av04xsfspdcqm4dwcha5850yrt
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN