Ai Video Editor Music Sync
v1.0.0Skip the learning curve of professional editing software. Describe what you want — sync the video cuts to the beat drops in my music track — and get beat-syn...
⭐ 0· 47·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is a cloud video-editing/music-sync frontend and asks for a service token (NEMO_TOKEN) and network access to nemovideo.ai — this aligns with its stated purpose. No unrelated credentials (AWS, GitHub, etc.) are requested. Note: the SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths, creating a small inconsistency about whether the skill will read local config.
Instruction Scope
The instructions tell the agent to check for NEMO_TOKEN, and if absent, call an anonymous-token API to obtain one, then create sessions, upload media, stream SSE chat, and poll export status. All of these operations are directly tied to cloud rendering and file uploads and are expected for the service. Important privacy note: user media and metadata are uploaded to a third-party endpoint (mega-api-prod.nemovideo.ai). The skill explicitly instructs not to expose tokens, but it does direct outbound network calls and transfers of user media — which is expected but worth confirming with the user.
Install Mechanism
This is instruction-only with no install spec and no code files, so nothing is written to disk by an installer. That is the lowest-risk install profile.
Credentials
Only a single environment variable (NEMO_TOKEN) is required, which is proportional for a cloud API client. However, instructions include an automatic anonymous-token request workflow (POST to /api/auth/anonymous-token) that will create and use a token if none is present — this behavior means the skill may obtain credentials on behalf of the user and use them for up to 7 days/100 credits. Also note the discrepancy between registry metadata (no config paths) and SKILL.md frontmatter (mentions ~/.config/nemovideo/) — clarify whether local config will be read or written.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or to modify other skills. Normal autonomous invocation is allowed (disable-model-invocation=false), which is expected for skills of this type.
Assessment
This skill sends your uploaded media and API calls to a third-party service (mega-api-prod.nemovideo.ai) to perform rendering. Before installing or using it: 1) Confirm you trust the nemovideo.ai service and are comfortable uploading the files you intend to edit (do not upload sensitive or confidential media unless you have explicit agreement). 2) Decide whether to provide your own NEMO_TOKEN (from a trusted account) or allow the skill to request an anonymous token — the skill will call the anonymous-token endpoint automatically if no token is present, which creates a short-lived credential and consumes free credits. 3) Ask the author/owner for clarification about the apparent config-path mention (~/.config/nemovideo/) — verify whether the skill will read or write local config. 4) Check billing/credits and retention policy on the service (who keeps the uploads, how long). 5) If you need stronger privacy guarantees, do not install or use this skill, or only use it with non-sensitive test media.Like a lobster shell, security has layers — review code before you run it.
latestvk973gcf2zqeyqqsqvnezxwtsgs84sd5r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN