ClawHub

Ai Screen Record

v1.0.0

educators, developers, and content creators edit screen recordings into polished screen recordings using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB,...

⭐ 0· 61·0 current·0 all-time
by@linmillsd7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill is an instruction-only cloud video editing integration and it only asks for a NEMO_TOKEN and (in frontmatter) a nemovideo config path, which is consistent with calling the described nemo-video backend. However, the registry metadata listed earlier reported no required config paths while the skill frontmatter references ~/.config/nemovideo/ — a minor inconsistency to clarify.
ℹ
Instruction Scope
SKILL.md stays within the edit/export domain: it describes authenticating, creating a session, uploading media, streaming SSE edits, polling export status, and returning download URLs. Two points to note: (1) it instructs the agent to automatically obtain an anonymous token if NEMO_TOKEN is absent (POST to the external endpoint) and (2) it instructs not to display raw API responses or token values to users. Both can be legitimate, but you should confirm where session tokens and session_id are stored and for how long.
✓
Install Mechanism
No install spec and no downloaded code; instruction-only skills are lower-risk for code injection. Nothing is written to disk by an installer here (though the skill may read/write a session/token in runtime state).
ℹ
Credentials
Only NEMO_TOKEN is requested as the primary credential, which fits a cloud editing service. The automatic anonymous-token flow makes the token optional, but that means the skill will call an external auth endpoint and obtain credentials on your behalf — acceptable for this purpose but worth awareness. The frontmatter's config path reference should be reconciled with registry metadata.
✓
Persistence & Privilege
always is false and autonomous invocation is permitted (platform default). The skill requires storing a session_id and using an auth token for subsequent calls, which is typical for a remote service; it does not request elevated agent-wide privileges or persistent system-wide changes.
Assessment
This skill appears to do what it says (cloud-based video editing) and only needs a NEMO_TOKEN, but check these before installing: 1) Privacy & content: using the skill uploads your videos (up to 500MB) to https://mega-api-prod.nemovideo.ai — do not upload sensitive or confidential recordings unless you trust the service and its privacy policy. 2) Token handling: the skill can auto-create anonymous tokens if NEMO_TOKEN is not set; ask where tokens/session IDs are stored and how long they persist. 3) Config path mismatch: the SKILL.md references ~/.config/nemovideo/, but registry metadata said no config paths — ask the publisher to clarify. 4) Billing/credits: anonymous tokens have limited credits and exports may require topping up; verify cost/limits before large jobs. If you need stronger assurance, request the publisher's homepage, a privacy policy, or source code to confirm storage and deletion behavior.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f0efe6avjdb5rdyv1zgp6jn84mv84

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖥️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments