Soft Skills Training Video — Create Communication, Leadership, and Professional Development Videos for Workplace Learning

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This instruction-only skill appears focused on generating workplace soft-skills training videos, with only a minor note that it references a NemoVideo token/configuration without much explanation.

This skill looks benign for creating soft-skills training video content. Before using it, confirm what NEMO_TOKEN and ~/.config/nemovideo/ are used for, and provide only the minimum provider access needed to generate the videos.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI03: Identity and Privilege Abuse
Low
What this means

Using this skill may require access to a NemoVideo token or local configuration, which could affect the associated provider account if misused.

Why it was flagged

The skill declares a provider credential and local configuration path, indicating it may rely on a NemoVideo account or local provider configuration even though the main instructions do not explain that dependency.

Skill content
metadata: {"openclaw": {"emoji": "🤝", "requires": {"env": [], "configPaths": ["~/.config/nemovideo/"]}, "primaryEnv": "NEMO_TOKEN"}}
Recommendation

Only provide a scoped token for the intended video-generation service, review what is stored in ~/.config/nemovideo/, and avoid sharing broader account credentials.