Automatic Subtitle Generator
v1.0.0Tell me what you need and I'll handle the heavy lifting — whether that's captioning a tutorial, adding multilingual subtitles to a product demo, or burning r...
⭐ 0· 44·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is an instruction-only subtitle generator that calls the NemoVideo API. Asking for a NEMO_TOKEN and reading/writing ~/.config/nemovideo/client_id is consistent with a cloud captioning service. Minor inconsistency: the skill declares a primaryEnv (NEMO_TOKEN) in some metadata but the 'requires.env' list in the SKILL.md frontmatter is empty — the runtime clearly depends on a service token.
Instruction Scope
Runtime instructions stay focused on uploading videos, creating sessions, checking credits, and streaming SSE results to the user. They explicitly instruct the agent to read or create a UUID at ~/.config/nemovideo/client_id and to save session_id values. These file reads/writes are reasonable for client identification/session management but are notable because they touch the user's home config directory and will write persistent data.
Install Mechanism
No install spec or code files — instruction-only. That minimizes on-disk risk because nothing is downloaded or executed by an installer.
Credentials
The skill only needs a single service credential (NEMO_TOKEN), which is proportional. However, the packaging metadata is inconsistent: the registry summary earlier lists no required env vars while a primary credential (NEMO_TOKEN) is declared elsewhere. The skill also offers an anonymous-token flow (POST to the NemoVideo auth endpoint) that creates a token and relies on a client_id file in ~/.config — acceptable for this purpose but worth noting because it results in tokens being stored/used by the agent.
Persistence & Privilege
always:false and normal invocation behavior. The skill will read/write a small file under ~/.config/nemovideo/ and may store an acquired token in memory or (per instructions) rely on the NEMO_TOKEN env var; it does not request broad system privileges or attempt to modify other skills or global agent settings.
Assessment
This skill appears to do what it claims: it uploads videos to NemoVideo and returns subtitles. Before installing, confirm you trust the NemoVideo service and its domain (mega-api-prod.nemovideo.ai / nemovideo.com). Be aware that: (1) the skill will read and may create a small file at ~/.config/nemovideo/client_id, (2) it requires or will obtain a NEMO_TOKEN (either provided by you or acquired via an anonymous-token API), and (3) you will be uploading media to an external service — do not send sensitive or private videos unless you accept that. Also note the small metadata inconsistency (primary credential present but not listed in requires.env); you may want to verify how your environment will provide NEMO_TOKEN and how tokens are stored/rotated by the agent. If you have privacy or compliance requirements, review NemoVideo's policies and consider using your own account token rather than the anonymous flow.Like a lobster shell, security has layers — review code before you run it.
latestvk97cxj3tecg3mnb5kbzbh3tn1983wjs7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Primary envNEMO_TOKEN