ClawHub

Free Video Free

v1.0.0

Skip the learning curve of professional editing software. Describe what you want — trim, add music, and export this video for free — and get edited MP4 video...

⭐ 0· 55·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name and description match its runtime instructions: it uploads user-provided video files and drives a cloud render pipeline at mega-api-prod.nemovideo.ai using a NEMO_TOKEN. Required headers, endpoints, and workflows all align with a remote video-editing service.
ℹ
Instruction Scope
SKILL.md confines actions to the nemovideo API (auth, session creation, SSE chat, upload, export, state). It does not instruct reading unrelated system files or other environment variables. A minor ambiguity: it instructs the agent to 'auto-detect' an install-platform value for the X-Skill-Platform header, which may require inspecting the runtime/install path (this is vague but not obviously malicious).
✓
Install Mechanism
This is an instruction-only skill with no install spec or bundled code, so nothing is downloaded or written by the skill itself — lowest-risk installation profile.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is declared as required and is directly used for Bearer auth with the service, which is proportionate. Minor inconsistency: the SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths — if the skill actually reads that directory it would broaden access and should be clarified.
✓
Persistence & Privilege
The skill does not request always:true and does not ask to modify other skills or system-wide settings. It instructs the agent to persist session_id (normal for interacting with a remote service), which is proportionate for its purpose.
Assessment
This skill appears to do what it says: it uploads videos to nemovideo.ai and returns edited exports using a NEMO_TOKEN. Before installing or using it, consider: (1) Do not upload sensitive or private videos unless you trust the nemovideo service and its retention/privacy policy. (2) The skill can auto-generate an anonymous token by calling https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token — that will create a short-lived token; treat it like any credential. (3) Clarify the config-path discrepancy: SKILL.md mentions ~/.config/nemovideo/ even though the registry didn’t declare required config paths — ask the publisher whether the agent will read that directory. (4) Because the skill is instruction-only and can be invoked by the agent, avoid granting it or sending content you wouldn’t want uploaded automatically; test with non-sensitive sample videos first. (5) If you need stricter control, set NEMO_TOKEN yourself (so the skill won’t request anonymous auth) and review network activity or privacy policy for the backend service.

Like a lobster shell, security has layers — review code before you run it.

latestvk970jvxz2cymdabshbgrp4vp9984meqd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments