Vmaker Ai Video
v1.0.0Skip the learning curve of professional editing software. Describe what you want — remove filler words, add captions, and export as a short promo video — and...
⭐ 0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description match the instructions: the SKILL.md describes uploading videos, creating a session, sending edits, and exporting — all via the nemovideo.ai API. Requiring a NEMO_TOKEN (primary credential) is appropriate for this API-based video editing service.
Instruction Scope
Most instructions stay within the editing workflow (session creation, SSE chat, upload, export). The doc also instructs detecting install platform by checking install paths (~/.clawhub, ~/.cursor/) and reading the file's YAML frontmatter; probing install paths or other user-home locations is scope creep relative to pure video editing and may require filesystem access not otherwise declared.
Install Mechanism
No install spec or code files are present (instruction-only). This minimizes write-to-disk risk; nothing is downloaded or executed by an installer.
Credentials
Only NEMO_TOKEN is required, which is proportional to a service client. Metadata also lists a config path (~/.config/nemovideo/), and the instructions imply probing home directories to detect platform — these suggest optional local config access that isn't strictly necessary for the stated purpose and should be considered before granting broad file access.
Persistence & Privilege
always:false (not force-included). The skill runs as an ordinary, user-invocable skill and uses network calls; there is no persistent installer or modification of other skills or system-wide settings described.
Assessment
This instruction-only skill appears to do what it says: call nemovideo.ai endpoints to upload, edit, and export videos and it asks only for a single NEMO_TOKEN. Before installing/using it: 1) Only provide a NEMO_TOKEN you trust (prefer short-lived or limited-scope tokens); 2) be aware the skill may probe your home directory (checks for ~/.clawhub, ~/.cursor, and references ~/.config/nemovideo/) to set attribution headers — avoid running it in environments with sensitive files you don't want read; 3) anonymous-token creation posts to https://mega-api-prod.nemovideo.ai to obtain a short-lived token — confirm you trust that domain before using; and 4) do not supply long-lived cloud credentials unrelated to video editing. If you need higher assurance, ask the author for clarification on why filesystem checks and the config path are required and request a minimal mode that avoids any local filesystem access.Like a lobster shell, security has layers — review code before you run it.
latestvk97205faqe25m56bgzngnc2b0984n4qe
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
