Video Screen Recorder
v1.0.0Tired of juggling clunky software just to record your screen and share it? The video-screen-recorder skill lets you capture screen activity, trim recordings,...
⭐ 0· 78·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the runtime instructions: the skill routes capture/edit/export operations to the NemoVideo API and requires an API token and a per-user client_id for session/rate tracking. Required config path (~/.config/nemovideo/) and NEMO_TOKEN are coherent with a cloud recording service.
Instruction Scope
SKILL.md instructs the agent to call NemoVideo REST endpoints, upload video files/URLs, create sessions, and persist a client_id to ~/.config/nemovideo/client_id. This is within the declared purpose, but it means the agent will transmit captured video and metadata to a third party and create a file in the user's home config directory — the user should expect external uploads of potentially sensitive content.
Install Mechanism
Instruction-only skill with no install spec or code files; nothing is downloaded or written beyond the declared client_id file. This is the lowest install risk profile.
Credentials
The skill declares a single required credential (NEMO_TOKEN), which aligns with a cloud API. SKILL.md also references NEMO_API_URL (default provided) but that env var is not listed in the registry 'requires' metadata — minor inconsistency. The skill requests write access to ~/.config/nemovideo/, which is reasonable for storing a client_id but worth noting.
Persistence & Privilege
always:false (normal). The skill will persist a UUID client_id to ~/.config/nemovideo/client_id for rate-limit tracking; this is limited persistence tied to the skill's operation and not a system-wide config modification. Autonomous invocation is allowed (platform default) — combine this with the fact that recordings are uploaded to an external service when deciding trust.
Assessment
This skill appears to do what it claims: it contacts nemovideo's API, uploads recordings, and stores a small client_id in ~/.config/nemovideo/. Before installing, confirm you trust https://nemovideo.com and the listed API domain (mega-api-prod.nemovideo.ai). Be aware that screen recordings can contain sensitive data — do not record or upload secrets you don't want sent off-host. Check the NemoVideo privacy policy for retention/processing of recordings. Note the SKILL.md references NEMO_API_URL (default) even though the registry only lists NEMO_TOKEN; if you need to restrict the API endpoint or inspect traffic, set NEMO_API_URL explicitly. If you don't want any data leaving your machine, do not install this skill.Like a lobster shell, security has layers — review code before you run it.
latestvk97evvny65j0tkgm64z9nfgpvd83vjqp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎥 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN