Video Compressor Jpg
v1.0.0Turn a 200MB MP4 video file into 1080p compressed video files just by typing what you need. Whether it's reducing video file size for sharing or storage or q...
⭐ 0· 49·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill claims to compress videos and export frames and its runtime instructions only reference endpoints and patterns needed to upload videos, create sessions, render, and download results. Requesting a single service token (NEMO_TOKEN) is proportional to a cloud render service.
Instruction Scope
Instructions explicitly instruct the agent to upload user files and interact with the external API (including streaming SSE responses). They also include logic to obtain an anonymous token from the same API if NEMO_TOKEN is absent. This is expected for a cloud-based video processor but means user files will leave the local environment — do not upload sensitive content unless you trust the service.
Install Mechanism
No install spec and no code files (instruction-only). That reduces supply-chain risk: nothing is written to disk by an installer as part of the skill package itself.
Credentials
Only a single credential (NEMO_TOKEN) is declared as required, which fits the stated purpose. The skill will also create and use anonymous tokens via the service if no token is provided. Minor metadata inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) not shown in the registry's required config paths — this is a small mismatch but not by itself dangerous.
Persistence & Privilege
The skill does not request always:true, has no install behavior, and does not ask to modify other skills or system settings. Its runtime behavior is limited to making HTTP calls to the external API and streaming responses.
Assessment
This skill will upload whatever video files you give it to https://mega-api-prod.nemovideo.ai and will either use your provided NEMO_TOKEN or obtain a short-lived anonymous token for you. Before using it: 1) Don’t upload sensitive or private videos unless you trust that domain and its privacy/storage policies. 2) Prefer to supply your own NEMO_TOKEN only if you understand where that token is scoped/issued. 3) Ask the publisher for a homepage, documentation, or privacy/security policy (none is listed). 4) Note the small metadata mismatch (a config path in SKILL.md not declared in registry) — it’s likely benign but you can request clarification. If you need lower risk, test with non-sensitive short clips first and verify the returned download URLs and retention behavior with the service provider.Like a lobster shell, security has layers — review code before you run it.
latestvk97ed23605g94z4c44xpz8q8xn84q520
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🗜️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN