Free Video Ai
v1.0.0Skip the learning curve of professional editing software. Describe what you want — trim silences, add captions, and export as MP4 — and get edited MP4 videos...
⭐ 0· 54·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (AI video editing, trim/captions/export) matches the runtime instructions and API endpoints. Requiring a single service token (NEMO_TOKEN) is expected. Minor metadata inconsistency: the registry summary indicated no required config paths, but the skill frontmatter references ~/.config/nemovideo/ — this is likely benign but worth noting.
Instruction Scope
Instructions remain focused on editing/upload/upload flow and session management with the nemo backend. They include network calls (anonymous token creation, session creation, SSE streaming, upload and render endpoints) and instruct the agent to inspect the install path to set X-Skill-Platform — that implies simple filesystem probing (home path checks). The skill also instructs not to expose tokens/raw API output. There is no instruction to read unrelated user files or to exfiltrate arbitrary system data, but the skill will transmit user-supplied videos and session tokens to the external API (expected for this purpose).
Install Mechanism
Instruction-only skill with no install spec or code files. This is the lowest-risk install model; nothing is written to disk by an installer step according to the manifest.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv). The SKILL.md will generate an anonymous NEMO_TOKEN if none is present by calling the service's anonymous-token endpoint — this is coherent but means the skill can obtain credentials on the fly. The token grants the skill (and backend) the ability to perform uploads and start renders, so it should be treated as sensitive. The frontmatter's reference to ~/.config/nemovideo/ suggests the skill might look for stored configuration there.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request permanent or system-wide privileges, nor does it indicate modifying other skills or system agent settings. Autonomous invocation is allowed (platform default) but not combined with other elevated privileges.
Assessment
This skill appears to do what it says: it uploads your video files to mega-api-prod.nemovideo.ai and uses a NEMO_TOKEN (or creates an anonymous one) to run cloud rendering. Before installing or using it:
- Treat your videos as being sent to a third-party service — do not upload sensitive or private footage unless you trust the service and its privacy policy.
- The NEMO_TOKEN is a credential that allows uploads and rendering; if a token already exists in your environment it will be used, otherwise the skill will fetch an anonymous token. Consider whether you want a token present or to rely on the anonymous flow.
- The skill may check your install paths (e.g., ~/.clawhub/, ~/.cursor/) and ~/.config/nemovideo/ to set headers and detect platform; this is minor filesystem probing but worth knowing.
- Metadata inconsistency: the registry said no config paths required but the SKILL.md references ~/.config/nemovideo/ — confirm how/where credentials or anonymous tokens will be persisted (if at all).
If you are comfortable with videos being processed by mega-api-prod.nemovideo.ai and with the token behavior above, the skill is coherent. If you need guarantees about data retention, encryption, or account binding, ask the publisher for their privacy/security documentation before uploading sensitive content.Like a lobster shell, security has layers — review code before you run it.
latestvk97674zn2sky31s6a8b94wfx9s84mbg1
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN