ClawHub

Francais Editor Ai

v1.0.0

French-speaking content creators edit raw video footage into edited French videos using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB, renders on cloud...

⭐ 0· 64·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to perform cloud GPU video editing and its instructions require a NEMO_TOKEN and call nemovideo.ai endpoints to create sessions, upload files, run renders, and fetch results — all coherent for a cloud rendering service. Minor metadata mismatch: registry shows no required config paths but the SKILL.md frontmatter lists ~/.config/nemovideo/.
ℹ
Instruction Scope
Instructions explicitly describe obtaining an anonymous token, creating a session, uploading user video files (via multipart or URL), driving renders via SSE, polling render status, and returning download URLs. These actions are within the declared purpose, but they involve sending user media and metadata to an external service and detecting the agent install path to set attribution headers.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer. Low install risk.
ℹ
Credentials
Only one credential is required (NEMO_TOKEN), which is appropriate for a cloud API. The SKILL.md also instructs acquiring an anonymous token via the public auth endpoint if the env var isn't present. The frontmatter references a configPath (~/.config/nemovideo/) not declared in the registry metadata — a small inconsistency to be aware of.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated or persistent system privileges. It permits autonomous invocation (the platform default), which combined with external API access increases blast radius but is expected for a cloud service integration.
Scan Findings in Context
[no_regex_findings] expected: The static scanner found no code to analyze (instruction-only SKILL.md). Lack of findings is expected for a text-only skill, but does not mean the remote endpoints are trustworthy.
Assessment
This skill will upload any video you give it to an external service (mega-api-prod.nemovideo.ai) and will obtain or use a NEMO_TOKEN to do renders. That behavior is consistent with its description, but the skill's source/homepage is unknown. Before using it: (1) do not upload sensitive or private footage you wouldn't share with a third party, (2) prefer providing your own API token rather than letting the skill obtain an anonymous token if you want auditability, (3) verify the service owner or privacy policy if possible, and (4) note the small metadata inconsistency (a config path appears in SKILL.md but not in registry metadata). If you need stronger assurance, request a published homepage, owner contact, or review of the remote API's terms and security practices before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk97byfet1z9ga0qkq8de71tays84kcaw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🇫🇷 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments