ClawHub

With Ai Free

v1.0.0

Get edited MP4 videos ready to post, without touching a single slider. Upload your video clips (MP4, MOV, AVI, WebM, up to 500MB), say something like "trim s...

⭐ 0· 59·0 current·0 all-time
by@linmillsd7
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
Name/description match the runtime instructions: the skill routes uploads and edit requests to nemovideo.ai and requires a NEMO_TOKEN for API calls. One inconsistency: the registry metadata reported 'Required config paths: none' while the SKILL.md frontmatter lists a config path (~/.config/nemovideo/). That mismatch should be clarified (does the skill read/write that directory?).
✓
Instruction Scope
SKILL.md gives explicit API endpoints and step-by-step behaviors (session creation, upload, SSE handling, export polling). All instructed actions (POST uploads, poll state, include Authorization header) are within the stated purpose of cloud video editing. It instructs saving a session_id and deriving platform attribution from install paths—saving session IDs is expected but may imply local persistence; the agent is told not to print tokens or raw JSON which is sensible.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest install risk. No downloads, packages, or binary installs are requested.
ℹ
Credentials
The only required credential is NEMO_TOKEN, which is appropriate for an API-backed editing service. The skill also documents how to obtain an anonymous token via the service's auth endpoint. The SKILL.md frontmatter declares a config path (~/.config/nemovideo/); if the skill actually reads/writes that path, that increases its access footprint beyond just the NEMO_TOKEN and should be confirmed. No unrelated secrets are requested.
✓
Persistence & Privilege
Skill is not always-enabled and does not request system-wide privileges. It asks to store a session_id and to detect an install path for header attribution — acceptable for this purpose. Autonomous invocation is allowed by platform default; this is normal and not by itself a red flag.
Assessment
This skill sends your uploaded videos and edit commands to mega-api-prod.nemovideo.ai and uses a NEMO_TOKEN (or it will mint a short-lived anonymous token) to authenticate. Before installing: (1) confirm you're comfortable uploading your video content to that external service and review its privacy/terms, (2) prefer using an anonymous token or a revocable limited credential rather than a long-lived secret, (3) ask the author whether the skill will read or write ~/.config/nemovideo/ (the SKILL.md frontmatter lists that path but the registry metadata did not), and (4) remember the agent can invoke skills autonomously by default—only install if you trust the service to handle your media and metadata.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ch4fz7f3k656xje7mb2t1fx84ncj5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🆓 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments