ClawHub

Podcast Video Recording Software

v1.0.0

convert raw audio/video into polished podcast videos with this skill. Works with MP4, MOV, WAV, MP3 files up to 500MB. podcasters use it for converting podca...

⭐ 0· 50·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (podcast -> polished video) align with the actual behavior: uploading media, creating render jobs, polling export endpoints. Requesting a single service credential (NEMO_TOKEN) and a config path under ~/.config/nemovideo/ is consistent with a cloud-rendering service client.
ℹ
Instruction Scope
The SKILL.md instructs the agent to obtain an anonymous token (if none provided), create a session, upload user media, and poll render status — all appropriate for the stated purpose. It explicitly tells the agent to not show raw API responses or token values. Important privacy implication: user media files are sent to https://mega-api-prod.nemovideo.ai, which is expected but should be known to the user before uploading sensitive content.
✓
Install Mechanism
No install spec and no code files (instruction-only), so nothing is written to disk by an installer. This is the lowest-risk install model and is coherent with the skill being a thin client for a cloud API.
ℹ
Credentials
Only one credential (NEMO_TOKEN) is required and is the declared primaryEnv — appropriate for a hosted API. The SKILL.md also references a config path (~/.config/nemovideo/) for session storage, which is reasonable but gives the skill a location to persist session tokens/IDs; consider whether you want that stored locally. Headers include X-Skill-Platform which may reveal install-path-derived metadata.
✓
Persistence & Privilege
always:false (not force-included) and model invocation not disabled (normal). The skill does not request system-wide privileges or modifications to other skills. Session persistence via the stated config path is expected for a client that resumes or polls jobs.
Assessment
This skill is coherent with its stated purpose, but it uploads your audio/video to a third-party backend (mega-api-prod.nemovideo.ai) and will create or use a NEMO_TOKEN that grants render credits. Before installing or using: (1) confirm you trust the service (unknown homepage/source here), (2) avoid uploading sensitive or confidential media unless you accept the service's privacy/retention policies, (3) if you prefer control, provide your own NEMO_TOKEN (instead of letting the skill obtain an anonymous token) and review or remove any session/token files under ~/.config/nemovideo/ after use, and (4) verify the domain and terms if possible. Because this is instruction-only with no shipped code, there is nothing else to audit locally — lack of source/homepage reduces confidence, so proceed cautiously.

Like a lobster shell, security has layers — review code before you run it.

latestvk97486sdtnrca0hq3d7s2bpnp184p03m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎙️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments