ClawHub

Youtube Video Editor Online

v1.0.5

The youtube-video-editor-online skill lets creators trim, cut, caption, and reformat footage specifically for YouTube publishing — directly through conversat...

⭐ 0· 101·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (YouTube-focused video editing) matches the operations described (upload, edit, export) and the declared API domain. Requesting an API token for a video-processing service is proportional. The skill also documents accepted file formats and YouTube-specific outputs, which fits the purpose.
ℹ
Instruction Scope
Runtime instructions direct the agent to create/read ~/.config/nemovideo/client_id, call the nemovideo API via curl to obtain an anonymous token, manage a session, handle uploads, and export. These are within the editing scope. The instructions do proactively instruct a greeting on first contact and to persist a client_id file — benign but behavioral (non-security) scope expansion. No instructions ask for unrelated files, system secrets, or other services.
✓
Install Mechanism
No install spec and no code files — instruction-only. That minimizes disk write/execute risk. The only side-effect is writing a small client_id file to ~/.config/nemovideo/ and making network requests to nemovideo hosts as part of normal operation.
ℹ
Credentials
The registry lists NEMO_TOKEN as the primary credential; the SKILL.md clarifies NEMO_TOKEN can be auto-generated (anonymous token) and other env vars (NEMO_API_URL, NEMO_WEB_URL, NEMO_CLIENT_ID, SKILL_SOURCE) are optional. This is mostly proportional to the service; however there's a minor metadata mismatch: the registry marked NEMO_TOKEN as required while the SKILL.md states it is optional and auto-created when absent. No unrelated secret env vars are requested.
✓
Persistence & Privilege
always:false and model invocation not disabled (normal). The skill persists only a UUID client_id to ~/.config/nemovideo/client_id; it does not request system-wide configuration changes or other skills' credentials. This level of persistence is reasonable for avoiding rate limits.
Assessment
This skill appears coherent for a cloud-based video editor, but review and accept these points before installing: 1) The skill will upload your video files to nemovideo's API (https://mega-api-prod.nemovideo.ai) — don't upload sensitive content unless you trust the service/policy. 2) It will create and persist ~/.config/nemovideo/client_id (a non-secret UUID) to avoid rate limits. 3) If you do not set NEMO_TOKEN, the skill will request an anonymous token from the API and use it for the session (100 free credits, expires after 7 days). 4) There is a small metadata mismatch: the registry marks NEMO_TOKEN as required while the instructions say it's optional and auto-generated; confirm how your deployment handles env vars if you need stricter control. If you want stronger safety, inspect nemovideo.com's privacy/terms, or avoid uploading private videos until you verify the service.

Like a lobster shell, security has layers — review code before you run it.

latestvk977d3106td5gp486b0332h04183x3dj

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments