ClawHub

Ai Video Subtitle Editor

v1.0.0

Create, edit, and style subtitles for any video with AI — auto-transcribe speech to text, translate subtitles to 50+ languages, style with custom fonts and c...

⭐ 0· 63·1 current·1 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to transcribe, style, translate, and render subtitles and its runtime example calls an external NemoVideo API endpoint and references a bearer token (NEMO_TOKEN). Requiring a service token for an external subtitle/transcription API is appropriate for the stated purpose.
ℹ
Instruction Scope
The SKILL.md instructs the agent to upload videos and call the mega-api-prod.nemovideo.ai API (via curl with Authorization: Bearer $NEMO_TOKEN). Uploading/local file access is expected for a video-subtitling skill, but it means the agent will transmit potentially sensitive video/audio to an external service. The instructions do not request unrelated system files or other environment variables.
✓
Install Mechanism
No install spec or code files are included (instruction-only). This lowers risk because nothing is written to disk or executed locally by an install step.
ℹ
Credentials
The primary credential is NEMO_TOKEN which is proportional to calling an external NemoVideo API. However, metadata in SKILL.md includes a configPaths entry (~/.config/nemovideo/) while the registry metadata indicated no required config paths; this metadata mismatch should be clarified. The skill does not request unrelated secrets.
✓
Persistence & Privilege
always is false and there is no install step or requests to modify other skills or system-wide configs. The skill can be invoked autonomously by the agent (platform default), which is expected behavior for a service-integration skill.
Assessment
This skill appears coherent for adding subtitles via an external NemoVideo API and only needs a single service token (NEMO_TOKEN). Before installing/use: (1) Confirm you trust nemovideo.ai (unknown homepage/source here) — the skill will upload video/audio to that external endpoint. (2) Only provide a token scoped for this service; avoid reusing high-privilege or long-lived tokens. (3) Check privacy/billing: uploaded content may be stored or billed by the service. (4) Note the metadata mismatch: SKILL.md references a config directory (~/.config/nemovideo/) — verify whether the platform will read local config files. (5) If you will upload sensitive videos, verify the vendor's data retention and security policies and consider using temporary/limited-scope tokens or rotating the token after use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9737hw89g8y926x1wdsftebvn83svnz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📝 Clawdis
Primary envNEMO_TOKEN

Comments