Ffmpeg Video To Mp3
v1.0.0Turn raw video files into clean, ready-to-use MP3 audio tracks in seconds. This ffmpeg-video-to-mp3 skill strips the audio layer from your footage and delive...
⭐ 0· 40·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to perform server-side FFmpeg-based audio extraction and its requirements (NEMO_TOKEN, NemoVideo API domain, ~/.config/nemovideo/) align with a cloud conversion service. There are no unrelated credentials or binaries requested.
Instruction Scope
Runtime instructions direct the agent to create/read ~/.config/nemovideo/client_id (UUID) if needed, obtain or use NEMO_TOKEN, create a session, upload user-supplied video files or URLs, and poll SSE/export endpoints. This is consistent with a remote conversion service. Note: the instructions also advise constructing a claim link that embeds the token in the URL (https://nemovideo.com/workspace/claim?token=...), which could expose the token in browser history or logs and is a privacy/credential-exposure risk even if functionally coherent.
Install Mechanism
No install spec or third-party downloads are present (instruction-only skill). Nothing is written to disk except the small config file the skill explicitly manages (~/.config/nemovideo/client_id), which is declared in metadata.
Credentials
Only a single service credential (NEMO_TOKEN) is required, which is appropriate for calling a third-party API. The skill will attempt to obtain a short-lived anonymous token if none is present by POSTing with a client id stored under ~/.config/nemovideo/, which is consistent with the described behavior. Users should note that tokens are used in API calls and may be embedded in claim URLs.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. The only persistent artifact the instructions create/read is a client_id under ~/.config/nemovideo/, which is scoped to the service and matches the declared configPaths.
Assessment
This skill uploads files to a NemoVideo service and requires a NEMO_TOKEN (or will generate/use an anonymous starter token after creating ~/.config/nemovideo/client_id). Before installing, consider: 1) privacy — your video/audio will be sent to a third party for processing; avoid sending sensitive recordings unless you trust NemoVideo and have reviewed their privacy/retention policies; 2) token exposure — the skill suggests generating a claim URL that includes the token, which can leak the token in browser history or logs; prefer workflows that do not embed credentials in URLs; 3) inspect ~/.config/nemovideo/ if you want to control what is written locally; and 4) if you require local-only processing, do not install this cloud-based skill. If any of these points are unacceptable, do not enable the skill or provide the token.Like a lobster shell, security has layers — review code before you run it.
latestvk97b7t1dejtv03knk729xqv1z183zkjq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN