Video Maker Jobs
v1.0.0Turn a 2-minute screen recording of a product demo into 1080p polished job videos just by typing what you need. Whether it's creating professional video samp...
⭐ 0· 49·0 current·0 all-time
by@mory128
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill describes a cloud-based video rendering service and only requires a single service token (NEMO_TOKEN) and network access to mega-api-prod.nemovideo.ai. Those requirements are consistent with the stated purpose of uploading footage, queuing renders, and returning download URLs.
Instruction Scope
The SKILL.md contains specific runtime instructions to call the service API (create session, send SSE, upload files, poll render status). It also instructs creating an anonymous token if NEMO_TOKEN is absent, and to detect an install path to set X-Skill-Platform. These behaviors are coherent with the service but do involve making outbound HTTP requests and uploading user files to the external domain — expected for this skill but something the user should understand before sending private content.
Install Mechanism
Instruction-only skill with no install spec and no code files. Nothing is written to disk or downloaded by the skill itself as part of an install step, which minimizes install-time risk.
Credentials
Only NEMO_TOKEN is required, which is proportional to a cloud API integration. However, the SKILL.md frontmatter references a config path (~/.config/nemovideo/) and platform-detection via install paths; this conflicts with the registry metadata (which lists no config paths). The skill also describes minting anonymous tokens via the API when no token is present — reasonable, but the user should confirm whether generated tokens are transient and where they are stored.
Persistence & Privilege
The skill is not set to always:true and does not request system-wide privileges. It only needs ephemeral session state (session_id) to operate. There is no instruction to modify other skills or global agent config.
Assessment
This skill appears to be what it says: a cloud video-rendering helper that needs a NEMO_TOKEN and will upload footage to mega-api-prod.nemovideo.ai. Before installing or sending files: (1) confirm you trust the nemovideo.ai domain and understand their privacy/retention policy for uploaded videos, (2) prefer providing only non-sensitive demo footage (don’t upload secrets or PII), (3) verify where any generated anonymous token or session state will be stored (it should be ephemeral and not written to persistent files), and (4) note the small metadata mismatch (SKILL.md references a config path and platform detection that the registry didn’t list) — if you need stronger assurance, ask the skill author for a homepage, privacy docs, or an official API reference before granting a real NEMO_TOKEN. The static scanner had no code to analyze (instruction-only), so network/click-to-upload behavior is the primary runtime risk.Like a lobster shell, security has layers — review code before you run it.
latestvk97d15cbcty8yppezt3r2j0zcs84p7z4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN