ClawHub

Ai Video Rotate

v1.0.0

Rotate, flip, and fix video orientation with AI — correct sideways recordings, flip for mirror effect, rotate to any angle, and fix orientation metadata issu...

⭐ 0· 73·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill is an AI video-rotation/flip service and declares a single primary credential (NEMO_TOKEN) and a NemoVideo API endpoint in SKILL.md — these align with the stated purpose. The metadata also lists a config path (~/.config/nemovideo/) which is plausible for local tooling credentials/config, though the rest of the skill does not require other unrelated services or credentials.
✓
Instruction Scope
SKILL.md instructs the agent to upload video content to mega-api-prod.nemovideo.ai and to pass Authorization: Bearer $NEMO_TOKEN; it does not instruct reading unrelated system files or broad environment state. Note: the instructions imply user video data is sent to an external service — expected for a cloud video-processing skill but a privacy consideration for users.
✓
Install Mechanism
No install spec and no code files (instruction-only). This is the lowest-risk pattern: nothing is written to disk or installed by the skill itself.
✓
Credentials
Only a single service token (NEMO_TOKEN) is used, which is proportional for a remote API. There are no unrelated SECRET/TOKEN/PASSWORD env vars requested. The declared config path (~/.config/nemovideo/) is reasonable but grants access to a local config directory for this service — if present, that directory could contain additional tokens; the SKILL.md does not instruct reading it.
✓
Persistence & Privilege
The skill is not forced always-on (always: false) and uses normal autonomous invocation defaults. It does not request system-wide privileges or modify other skills. No persistence concerns identified.
Scan Findings in Context
[no_regex_findings] expected: The package is instruction-only (no code files), so the regex-based scanner had nothing to analyze. This is expected but means the SKILL.md is the primary security surface to review.
Assessment
This skill appears coherent with its stated purpose, but be aware it uploads your videos to an external endpoint (mega-api-prod.nemovideo.ai) using the NEMO_TOKEN. Before installing, verify you trust NemoVideo (check provider reputation and privacy policy), ensure the NEMO_TOKEN has limited scope, and avoid sending sensitive personal videos unless you accept external processing. Also check whether ~/.config/nemovideo/ exists and contains any other secrets you don’t want the skill to access.

Like a lobster shell, security has layers — review code before you run it.

latestvk9754gq9f1bgczsc8ydhrwfjqx83s4f1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔄 Clawdis
Primary envNEMO_TOKEN

Comments