Video Editing With For Beginners
v1.0.0beginners and first-time video creators edit raw video clips into edited video clips using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB, renders on cl...
⭐ 0· 55·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description (cloud video editing) matches the runtime instructions (upload, edit, render on a remote API) and the single required credential (NEMO_TOKEN) is appropriate. Minor inconsistency: the top-level registry data listed no required config paths, but the SKILL.md frontmatter declares a configPaths (~/.config/nemovideo/) — this mismatch should be clarified.
Instruction Scope
Instructions stay within video-editing scope (create session, upload files, SSE for edits, export/polling). They explicitly instruct obtaining an anonymous token if NEMO_TOKEN is not present and to upload user files to mega-api-prod.nemovideo.ai. This is expected for a cloud editor, but it means user videos and metadata will be transmitted to a third party; the skill also instructs detecting install path and reading its own frontmatter for attribution (harmless but requires file/path access).
Install Mechanism
No install spec and no code files — instruction-only skill. Nothing will be written to disk by an installer. This is the lowest-risk install profile.
Credentials
Only NEMO_TOKEN is declared as required (primaryEnv), which fits the described API. However, the SKILL.md supports an anonymous-token acquisition flow (POST to /api/auth/anonymous-token) so the skill can operate without a user-supplied token; that creates transient credentials (100 free credits, 7-day expiry). Also the frontmatter's configPaths (~/.config/nemovideo/) suggests the skill may look for local configuration — confirm whether the agent will read that path and what it contains.
Persistence & Privilege
always is false and the skill does not request elevated or system-wide persistence. It may obtain session tokens and interact autonomously (normal for skills); consider that autonomous invocation combined with remote uploads increases privacy exposure, but this is coherent with its purpose.
Assessment
This skill is coherent for cloud-based video editing, but it will upload your videos to mega-api-prod.nemovideo.ai and may obtain an anonymous API token if you don't provide NEMO_TOKEN. Before installing or running: 1) Decide whether you are comfortable uploading the footage (don’t use for sensitive content without checking the service’s retention/privacy policy). 2) If you prefer control, supply your own NEMO_TOKEN rather than relying on the anonymous flow. 3) Ask the publisher to clarify the configPaths vs. registry metadata mismatch and whether the skill will read ~/.config/nemovideo/. 4) Confirm how long uploaded files and anonymous tokens are retained and whether exports or logs are shared with third parties.Like a lobster shell, security has layers — review code before you run it.
latestvk97evsvnvn6ym2wxw04rn541r184nks4
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
