ClawHub

Editor Pick

v1.0.0

edit raw video footage into curated highlight clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators and video editors use...

⭐ 0· 58·0 current·0 all-time
by@roca-677
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill claims to perform cloud video editing and its instructions call a nemo video backend (mega-api-prod.nemovideo.ai) using an Authorization token (NEMO_TOKEN) — this is coherent. One inconsistency: registry metadata earlier said no required config paths, but the SKILL.md frontmatter lists a config path (~/.config/nemovideo/). This mismatch should be clarified but is plausibly benign (maybe optional local config).
✓
Instruction Scope
SKILL.md confines actions to creating/using a session with the nemo API, uploading user-provided video files or URLs, streaming SSE responses, polling job status, and returning download URLs. It does not instruct the agent to read arbitrary system files or unrelated credentials. It does mention detecting an install path to set an X-Skill-Platform header (e.g., checking ~/.clawhub/ or ~/.cursor/skills/) — this could require reading the agent environment but is limited in scope and not uncommon for telemetry/attribution.
✓
Install Mechanism
No install spec or code files are present (instruction-only). This minimizes local code installation risk; nothing is downloaded or written to disk by an installer.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is declared as required, which is proportionate for a cloud-rendering service. The skill also documents an anonymous-token flow (POST to /api/auth/anonymous-token) allowing it to obtain ephemeral tokens if none are supplied — functionally reasonable but worth noting. Again, the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while registry metadata did not; check whether that path will be read or written.
✓
Persistence & Privilege
always:false and normal autonomous invocation are used. The skill stores session_id and uses it for job lifecycle, which is expected; it does not request elevated platform-wide persistence or attempt to modify other skills' configs.
Assessment
This skill appears to do what it says: upload your video to a nemo-video cloud backend, run edits, and return a downloadable MP4. Before installing/using: 1) Be aware uploaded videos and metadata will be sent to https://mega-api-prod.nemovideo.ai — verify this service and its privacy/TOS if your content is sensitive. 2) The skill uses a single env var (NEMO_TOKEN). If you prefer, let the skill obtain an anonymous ephemeral token (described in SKILL.md) rather than supplying a long-lived secret. 3) There is a minor metadata mismatch about a local config path (~/.config/nemovideo/) — ask the publisher whether the agent will read or write that path. 4) Because this is instruction-only, no code is installed locally, but the skill will contact external endpoints when invoked; if you do not want cloud processing or external uploads, do not use this skill. If you need higher assurance, request the publisher's homepage/source repo and examine network endpoints and token lifecycle documentation.

Like a lobster shell, security has layers — review code before you run it.

latestvk97acce8jhsp2xpr8m53kj615d84p54m

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments