Subtitle Generator Ai
v1.0.0subtitle-generator-ai is a ClawHub skill that transcribes spoken audio from your videos and burns or exports accurate, time-synced subtitles in seconds. Unli...
⭐ 0· 70·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's declared primary credential (NEMO_TOKEN), config path (~/.config/nemovideo/), and the API endpoints it calls align with a remote subtitle/transcription service. It does not request unrelated cloud or system credentials.
Instruction Scope
Instructions direct the agent to upload user-provided video files, open a browser link, use SSE for interactive edits, and persist a client_id to ~/.config/nemovideo/client_id. These actions are expected for a cloud transcription workflow, but the skill also requires sending X-Skill-* headers that may include a detected install path (SKILL_SOURCE), which could reveal local path information to the external service.
Install Mechanism
No install spec or external downloads — this is an instruction-only skill (no code written to disk by an installer), which is lower risk.
Credentials
Only Nemo-specific variables are referenced (NEMO_TOKEN, NEMO_API_URL, NEMO_CLIENT_ID). NEMO_TOKEN is the primary credential but the README also documents an anonymous-token flow (token can be auto-generated and expires in 7 days). The skill writes a UUID client_id file to persist a client identifier; this is proportionate but worth noting because it persists state in the user's home directory.
Persistence & Privilege
The skill is not marked always:true and does not request system-wide or other-skills' configuration changes. Its only persistent effect is writing its own client_id under ~/.config/nemovideo/.
Assessment
This skill appears to be what it claims: it uploads videos to the NemoVideo API and returns subtitles. Before installing or using it, consider: (1) It will upload your video/audio to an external service (nemovideo) — avoid sending sensitive or private content. (2) It writes a small client_id file to ~/.config/nemovideo/ to avoid rate limits; you can inspect or remove that file at any time. (3) API requests include X-Skill-Source/X-Skill-Version/X-Skill-Platform headers (the SKILL_SOURCE can be derived from an install path), so the service may learn a bit about where the skill is installed; if that concerns you, review the privacy policy or run in an isolated environment. (4) NEMO_TOKEN may be auto-generated and expires after 7 days — revoke it from the web UI if you stop using the service. If you need more assurance, ask the skill author for the full SKILL.md and confirm how tokens and uploads are stored and protected on the NemoVideo side.Like a lobster shell, security has layers — review code before you run it.
latestvk9740hhax1j79re2xewxawcj1183m2ac
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
Primary envNEMO_TOKEN
