With Ai Best
v1.0.0Get AI-optimized videos ready to post, without touching a single slider. Upload your raw video footage (MP4, MOV, AVI, WebM, up to 500MB), say something like...
⭐ 0· 51·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description say AI cloud video enhancement and the runtime instructions call a nemo video API (upload, render, export). Requesting a NEMO_TOKEN is proportional to that purpose.
Instruction Scope
Instructions explicitly tell the agent to create sessions, upload files/URLs, stream SSE for edits, poll render status, and return download URLs — all expected for a cloud video service. They also instruct the agent to generate an anonymous token if NEMO_TOKEN is missing, to store session_id for subsequent calls, and to read the skill's YAML frontmatter and detect install path to populate attribution headers. The biggest operational implication is that user video files are uploaded to an external third-party endpoint (mega-api-prod.nemovideo.ai), so sensitive content will leave the host device.
Install Mechanism
This is instruction-only with no install spec and no code files, so nothing will be written to disk by an installer step from the skill itself. That lowers install-time risk.
Credentials
The skill declares a single primary credential NEMO_TOKEN which matches the API usage. Two small inconsistencies: the registry-level metadata shows no required config paths, while the SKILL.md frontmatter lists a config path (~/.config/nemovideo/); and SKILL.md marks NEMO_TOKEN as required but includes logic to auto-generate an anonymous token if it isn't present. These are likely benign but worth noting.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. It asks the agent to keep a session_id for the session lifecycle (normal). There is no instruction to change other skills' configs or require permanent always-on installation.
Scan Findings in Context
[no_regex_findings] expected: The static scanner found no code (instruction-only SKILL.md), so there were no regex matches to analyze. That is expected but means runtime instructions are the primary surface to review.
Assessment
This skill uploads your videos and metadata to an external third‑party service (mega-api-prod.nemovideo.ai) to perform edits — do not use it for sensitive or confidential footage unless you trust their privacy/security posture. Note two minor inconsistencies: the skill declares NEMO_TOKEN as required but will auto-request an anonymous token if none is present, and the SKILL.md frontmatter lists a config path that the registry metadata does not. Consider: (1) prefer providing your own NEMO_TOKEN (so you control the account/tokens) rather than allowing automatic anonymous token creation, (2) test with non-sensitive content first, (3) verify the service domain and its privacy/terms, and (4) if you need the agent to avoid reading local install paths or storing session state, ask the skill author to remove or clarify those behaviors. If you want a stricter safety posture, decline or limit this skill until the metadata/instruction mismatches are resolved and a clear privacy policy is available.Like a lobster shell, security has layers — review code before you run it.
latestvk979w19wpxq7m7s5d046dxrckh84nea6
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏆 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN