ClawHub

Video Background

v1.0.0

content creators, remote workers, marketers replace video clips into background-replaced videos using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB, re...

⭐ 0· 64·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (remote video background replacement) match the declared requirements: a single service token (NEMO_TOKEN) and a nemovideo config path. No unrelated credentials, binaries, or surprising capabilities are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to read NEMO_TOKEN (or obtain an anonymous token from the nemovideo API), create a session, upload videos, stream SSE responses, and poll render status — all expected for a cloud render workflow. It mentions detecting install path and a config directory (~/.config/nemovideo/) which implies inspecting user environment; this is plausible to set attribution headers or persist session info but is worth noting.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written by an installer. Lowest-risk category for install mechanism.
✓
Credentials
Only one required environment variable (NEMO_TOKEN) is declared as the primary credential. The skill documents falling back to an anonymous token flow if none is present. The declared config path (~/.config/nemovideo/) is consistent with a client that may persist session info; the requested env/config access is proportionate to the stated service.
✓
Persistence & Privilege
Skill is not forced-always, and allows normal autonomous invocation. It does not request system-wide or other-skills configuration changes; session tokens are used for the remote service only.
Assessment
This skill appears to do what it says: it will upload your videos to an external service (mega-api-prod.nemovideo.ai) and use a NEMO_TOKEN (or obtain a 7-day anonymous token) to run cloud GPU rendering. Before installing/using it: (1) confirm you trust the external service and review its privacy/terms (you are uploading potentially sensitive media); (2) avoid supplying long-lived personal credentials unless you trust the operator — use the anonymous token flow if you prefer temporary access; (3) be aware the skill may read/write a small config directory (~/.config/nemovideo/) to store session data and may detect the agent install path for attribution headers; (4) do not upload content you cannot share. If you need higher assurance, ask the publisher for source code or a reputable homepage and verify the API domain and TLS certificate.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dkc5t33m5t3c607sexr4q8n84jm8b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments