Ai Video Editor Descript
v1.0.0Get transcript-edited videos ready to post, without touching a single slider. Upload your raw video footage (MP4, MOV, AVI, WebM, up to 500MB), say something...
⭐ 0· 46·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is a cloud video-editing frontend and only requires a single API credential (NEMO_TOKEN) to call the described nemovideo.ai endpoints — this is proportional to the claimed functionality. Minor mismatch: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) whereas the registry metadata earlier reported no required config paths.
Instruction Scope
Runtime instructions confine actions to connecting to the nemovideo.ai API, uploading user-provided media, starting sessions, polling for render status, and returning download URLs. The skill asks the agent to detect install path (to set X-Skill-Platform) and to read the skill file frontmatter for version — these require limited filesystem/read access and are explainable for attribution headers, but they are broader than a purely stateless API client.
Install Mechanism
There is no install specification or third-party download; the skill is instruction-only so nothing is written to disk by an installer. This minimizes install-time risk.
Credentials
Only NEMO_TOKEN is declared as required and is appropriate for an API-backed service. The frontmatter also references a config path (~/.config/nemovideo/) that could be used to persist tokens/session info — the registry-level metadata did not list that, so there is an inconsistency to verify. No other credentials or secrets are requested.
Persistence & Privilege
Skill does not request always:true and does not ask to modify other skills or system-wide settings. It does instruct saving a session_id for ongoing operations (expected for a remote session workflow) but does not demand permanent elevated privileges.
Assessment
This skill appears to be a normal cloud video-editing integration: it will use a NEMO_TOKEN to call nemovideo.ai, upload your media, start render jobs, and return download links. Before installing, confirm you trust the domain (mega-api-prod.nemovideo.ai) and are comfortable uploading the videos (they will be sent off-device). Note the minor inconsistencies: the skill frontmatter mentions a config path (~/.config/nemovideo/) and asks the agent to detect its install path to set attribution headers — this means the skill may read limited filesystem info for attribution. If you prefer, set NEMO_TOKEN yourself (rather than allowing anonymous token creation) and avoid uploading sensitive content until you verify the provider's privacy/retention policy. If you want higher assurance, ask the publisher for an official homepage or privacy docs and clarification about the configPath usage.Like a lobster shell, security has layers — review code before you run it.
latestvk972akamb8w4rdq1y9zxzzvcyh84svmy
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN