Video Caption Generator Free Ab Old
v1.0.0Turn raw footage into fully captioned videos without spending a dime. This video-caption-generator-free skill automatically transcribes speech and burns accu...
⭐ 0· 50·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is a cloud video-captioning front-end and requires a NEMO_TOKEN and uses ~/.config/nemovideo/ — both are coherent with a hosted NemoVideo service. There are no unrelated credentials or unexpected binaries requested. One inconsistency: metadata declares NEMO_TOKEN as required but the runtime instructions include a flow to request an anonymous token if NEMO_TOKEN is missing.
Instruction Scope
SKILL.md stays within the captioning workflow (session creation, upload, SSE, export). It does instruct the agent to read/write ~/.config/nemovideo/client_id, detect install path for attribution headers, and to POST to nemo API endpoints. A privacy concern: the instructions produce a claim URL that includes the token as a query parameter (https://nemovideo.com/workspace/claim?token=$TOKEN...), which can leak the token via logs or link sharing; the doc simultaneously says 'Don't expose tokens', which is contradictory.
Install Mechanism
No install spec or downloaded code — instruction-only skill. Lowest risk in terms of arbitrary installs or executing fetched archives.
Credentials
Only one credential (NEMO_TOKEN) is declared as primary, which is proportional for a cloud API. It is reasonable for the service to store a client_id under ~/.config/nemovideo/. The earlier-noted contradiction (declared required env var vs. auto-anonymous-token creation) should be clarified: auto-creating a token is reasonable, but the metadata implying NEMO_TOKEN must already exist is inconsistent.
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or system-wide settings. It will create/modify its own config file under ~/.config/nemovideo/, which is expected for a client that caches a client_id/token.
Assessment
This skill appears to do what it says (connect to NemoVideo and caption videos), but review a few points before installing: 1) The skill will contact nemo-api-prod.nemovideo.ai and may create ~/.config/nemovideo/client_id and use/obtain a NEMO_TOKEN — if you prefer control, create and supply your own NEMO_TOKEN rather than letting the skill auto-generate one. 2) The generated claim URL includes the token as a query parameter — avoid sharing that URL publicly and be aware it could appear in logs. 3) Do not upload sensitive or private videos unless you trust nemo-video.com's privacy and retention policies; verify the vendor and review their terms. 4) If you need higher assurance, ask the publisher to remove the contradictory 'required env var' vs 'auto-create token' behavior and to avoid placing tokens in URLs. If any of these are unacceptable, do not install.Like a lobster shell, security has layers — review code before you run it.
latestvk977bjay6fk3axj5kdxra8jq5h83wpx7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN