ClawHub

Best Free Ai Video Editor

v1.0.0

Get polished edited clips ready to post, without touching a single slider. Upload your raw video footage (MP4, MOV, AVI, WebM, up to 500MB), say something li...

⭐ 0· 60·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description match the runtime instructions: the skill routes user uploads and editing commands to a remote nemo video API and requires a NEMO_TOKEN for authorization. Requiring a token to call a cloud rendering API is expected.
✓
Instruction Scope
SKILL.md gives detailed, bounded instructions for session creation, uploads, SSE handling, polling, and exports. The instructions do not ask the agent to read unrelated system files or other credentials, but they do instruct the agent to read the skill's frontmatter and detect install path to populate attribution headers (X-Skill-Platform). That detection is reasonable for attribution but should be noted as an extra runtime action.
✓
Install Mechanism
There is no install spec and no code files — instruction-only skills have the lowest install risk. Nothing is downloaded or written to disk by the skill itself.
ℹ
Credentials
The skill only requires a single credential (NEMO_TOKEN), which is proportionate for a remote API. However, the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) while the registry metadata listed none; this metadata inconsistency should be resolved. The skill can also generate an anonymous token via the public API if no token is provided, so it does not strictly require a long-lived secret.
✓
Persistence & Privilege
always:false and no installs; the skill does not request permanent system presence or elevated privileges. Autonomous invocation is allowed (platform default) but not combined with other high-risk factors.
Assessment
This skill appears to be what it claims: a client for a remote AI video-editing service. Before installing, confirm you trust the remote host (mega-api-prod.nemovideo.ai) because uploaded videos and audio will be transmitted and processed there. Note the skill needs a NEMO_TOKEN (or it will create a short-lived anonymous token), and SKILL.md asks the agent to read the skill frontmatter and detect its install path to populate attribution headers. There is a small metadata mismatch: the frontmatter lists a config path (~/.config/nemovideo/) while registry metadata did not — ask the publisher to clarify if the skill will read or write that path. If you will upload sensitive media, review the service's privacy/terms and avoid supplying long‑lived secrets unless you trust the provider. If anything about the domain, headers, or token handling looks unfamiliar, do not enable the skill until you verify the provider.

Like a lobster shell, security has layers — review code before you run it.

latestvk971ge3pv14a8hyg74xdwc78g584p3j8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments