ClawHub

Highlight Editor Best

v1.0.0

Turn a 30-minute gameplay or event recording into 1080p highlight reel clips just by typing what you need. Whether it's generating short highlight reels from...

⭐ 0· 59·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description describe a remote video highlight service; the only required credential (NEMO_TOKEN) and the documented API endpoints match that purpose. Requiring an API token to run exports is appropriate for a cloud render service.
ℹ
Instruction Scope
Instructions remain within the stated domain (upload videos, start sessions, poll render status, stream SSE). The skill will automatically obtain an anonymous token from the vendor if NEMO_TOKEN is not present and instructs the agent to hide raw token values from the user. It also asks the agent to detect the install path for an attribution header — this implies checking the agent's install location. The skill does not instruct reading unrelated files or unrelated environment variables, but it's not explicit where session_id or token are persisted (memory vs disk).
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is the lowest-risk install model.
ℹ
Credentials
Only NEMO_TOKEN is required and declared as primaryEnv, which fits the service. However SKILL.md firmware metadata references a config path (~/.config/nemovideo/) not present in the registry metadata — a small inconsistency. The automatic anonymous-token flow means the skill will call the vendor endpoint and use whichever token it obtains; that token grants access to render and download user uploads, so treat it like a credential.
✓
Persistence & Privilege
always is false and the skill does not request system-wide privileges. Autonomous invocation is default but not by itself a concern. The skill does ask to detect install path for attribution headers but does not request modifying other skills or system configs.
Assessment
This skill appears to do what it says: upload your videos to a remote GPU-backed service and return rendered highlight clips. Before installing: (1) Accept that your raw video and any audio/metadata will be uploaded to mega-api-prod.nemovideo.ai — review that service's privacy/TOS if you have sensitive content. (2) The skill will use or obtain a NEMO_TOKEN (anonymous tokens grant rendering access for ~7 days); treat that token like a credential. (3) There is a minor metadata inconsistency: SKILL.md mentions a config path (~/.config/nemovideo/) while the registry lists none — ask the author whether any files are ever written to disk. (4) If you prefer, pre-provision a NEMO_TOKEN (instead of letting the skill obtain one) so you control token lifecycle. If you want, I can extract the full SKILL.md and highlight any places where the agent might persist state or where uploads occur.

Like a lobster shell, security has layers — review code before you run it.

latestvk97524s6resxadghc70smj7pr184mp5z

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

✂️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments