ClawHub

Ai Audio Editor

v1.0.0

podcasters, YouTubers, content creators edit video or audio files into clean audio videos using this skill. Accepts MP4, MOV, AVI, WAV up to 500MB, renders o...

⭐ 0· 17·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill name/description (AI audio editing) aligns with the behavior in SKILL.md: it connects to a cloud render backend, uploads media, creates sessions, and requests renders. Requiring a NEMO_TOKEN is appropriate. However, the SKILL.md frontmatter references a config path (~/.config/nemovideo/) while the registry metadata earlier stated no required config paths — that mismatch is unexplained. The skill has no homepage or publisher info, which reduces provenance confidence.
✓
Instruction Scope
Runtime instructions are narrowly focused on session creation, SSE messaging, file upload, job polling, and export — all relevant to a cloud audio/video editor. The skill instructs creating an anonymous token if NEMO_TOKEN is absent, and uploading only user-supplied files or URLs. It does not direct the agent to read unrelated system files or other environment variables. One small ambiguity: the header X-Skill-Platform is to be 'auto-detect[ed] from install path', which could imply a filesystem check; the instructions do not explicitly require broad file reads, however.
✓
Install Mechanism
No install spec and no code files (instruction-only) — lowest install risk. All operations are network calls described in SKILL.md; nothing is downloaded or extracted by an installer.
✓
Credentials
Only a single credential (NEMO_TOKEN) is declared as required and used; the SKILL.md also describes obtaining a short-lived anonymous token if NEMO_TOKEN is missing. No unrelated credentials or broad system secrets are requested. This is proportionate to the stated cloud-backend purpose.
✓
Persistence & Privilege
The skill is not flagged always:true and does not request modifying other skills or global agent settings. It will create sessions and perform network calls under normal autonomous invocation, which is expected for this kind of skill.
Assessment
This skill appears to do what it says: it uploads media you provide to the nemovideo.ai backend and returns edited video files using a NEMO_TOKEN or a short-lived anonymous token it can fetch. Before installing/using: 1) Note the publisher and homepage are missing — consider whether you trust the external service (mega-api-prod.nemovideo.ai). 2) Don’t provide files you consider highly sensitive (private keys, documents) — the skill uploads any media you give it. 3) If you already have a NEMO_TOKEN, prefer supplying it so the skill uses your account rather than creating an anonymous token. 4) Ask the publisher for provenance (homepage, privacy policy, data retention) and clarification about the config path / install-path auto-detection if you need higher assurance.

Like a lobster shell, security has layers — review code before you run it.

latestvk976q5td0decnaweyyc6rd1hah84nsx8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎙️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments