ClawHub

Caption Generator Davinci Resolve

v1.0.0

Get captioned video files ready to post, without touching a single slider. Upload your video clips (MP4, MOV, AVI, MKV, up to 500MB), say something like "gen...

⭐ 0· 21·0 current·0 all-time
by@linmillsd7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill claims to generate/burn captions via a remote rendering backend and its only declared secret is NEMO_TOKEN for that backend. No unrelated binaries or credentials are requested, so the declared requirements match the stated purpose.
ℹ
Instruction Scope
Instructions stay within the captioning workflow (obtain token if missing, create session, upload media, stream SSE, start render). Two items to note: (1) the skill auto-generates an anonymous token by POSTing to the nemovideo API if NEMO_TOKEN is absent (this happens automatically per the instructions), and (2) it derives an attribution header from the agent's install path (e.g., checking ~/.clawhub/ or ~/.cursor/skills/), which implies reading install-path information. Both are explainable for this skill but worth user awareness.
✓
Install Mechanism
There is no install spec and no code files — the skill is instruction-only and makes HTTP calls at runtime. This is the lowest-risk installation posture.
ℹ
Credentials
Only NEMO_TOKEN is required and that is appropriate for a hosted caption/render service. The SKILL.md instructs generation/storage of anonymous tokens (valid 7 days) when NEMO_TOKEN is absent and references a config path in its YAML metadata (~/.config/nemovideo/), but the top-level registry summary listed 'required config paths: none' — a minor inconsistency. Users should expect the skill to store session/token metadata locally or in that config path unless they supply their own NEMO_TOKEN.
✓
Persistence & Privilege
The skill does not request 'always: true' or elevated platform privileges. It can be invoked autonomously by design (default for skills), but its actions (auth, upload, render) are consistent with its purpose and do not modify other skills or system-wide settings.
Assessment
This skill connects to a third‑party cloud service (mega-api-prod.nemovideo.ai) to upload your video and perform captioning. Before installing: (1) Confirm you trust nemovideo.ai — uploaded media and generated tokens will leave your machine. (2) Be aware the skill will auto-create an anonymous NEMO_TOKEN if you don't provide one; tokens are short‑lived (7 days) and may be stored in a local config folder (~/.config/nemovideo/ per metadata). If you prefer control, supply your own NEMO_TOKEN rather than relying on auto-generation. (3) The skill inspects the agent install path to set an X-Skill-Platform header — this reveals some environment/path information to the service. (4) Do not upload sensitive or regulated content unless you have verified the provider's privacy/retention policy. If you want further assurance, ask the skill author for source/homepage, a privacy policy, or explicit details on where tokens and session metadata are stored.

Like a lobster shell, security has layers — review code before you run it.

latestvk979p6skw35pwa70mddedqw8xx84qhj4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments