ClawHub

Language Learning Video

v1.0.0

Language Learning Video Maker — Create Vocabulary and Grammar Lesson Videos. Works by connecting to the NemoVideo AI backend. Supports MP4, MOV, AVI, WebM, a...

⭐ 0· 121·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to create language-learning videos via the NemoVideo backend and declares a single primary credential (NEMO_TOKEN). Asking for an API token is proportionate to that purpose. The apiDomain points to a nemovideo.ai backend, which matches the stated service.
ℹ
Instruction Scope
SKILL.md is instruction-only and focuses on building lesson videos. It includes metadata that declares a config path (~/.config/nemovideo/) and promises 'automatic credential setup on first use' — implying the agent or tooling may write to that path to store tokens. The provided SKILL.md content (truncated in the package) does not instruct reading unrelated system files or additional environment variables.
✓
Install Mechanism
No install specification or code files are present (instruction-only), so nothing will be downloaded or written by an installer during skill installation. This lowers installation risk. Runtime behavior may create config files per the SKILL.md metadata, however.
ℹ
Credentials
Only NEMO_TOKEN is required as an environment variable (declared as primaryEnv), which is appropriate for an API-backed video generator. Minor inconsistency: the registry metadata earlier lists 'Required config paths: none' while SKILL.md metadata lists a config path (~/.config/nemovideo/). That suggests the skill may create or expect local config files to store credentials.
✓
Persistence & Privilege
always is false and the skill doesn't request elevated system presence. Autonomous invocation is allowed by default (disable-model-invocation:false) — this is normal platform behavior and not by itself a concern. The only persistent artifact implied is credential storage under the user config path.
Assessment
This skill appears to be what it says: a NemoVideo-backed video maker that needs one API token. Before installing, verify these practical points: 1) Confirm the token you provide (NEMO_TOKEN) is scoped only to NemoVideo and not reused credentials (don’t give shared or high-privilege keys). 2) Check how credentials are stored: SKILL.md mentions automatic credential setup and a config directory (~/.config/nemovideo/). If you care about where tokens are saved, inspect or sandbox first. 3) Validate the apiDomain (https://mega-api-prod.nemovideo.ai) and review NemoVideo’s privacy/data retention policy on the homepage/repository to understand what media or learner data may be sent to their backend. 4) Review the GitHub repository linked in SKILL.md (if you can) for more concrete implementation details—there are small metadata mismatches (SKILL.md version 1.0.5 vs registry 1.0.0 and a registry claim of no config paths vs SKILL.md claiming one) that merit a quick source check. If you cannot validate these, consider testing with a throwaway token or in an isolated environment.

Like a lobster shell, security has layers — review code before you run it.

latestvk97br4dfhc3x3vnzj6f098xx2n83sa74

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🗣️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments