Lyric Video Maker
v1.0.0Turn your audio tracks and footage into polished lyric videos that captivate viewers from the first beat. This lyric-video-maker skill overlays synchronized,...
⭐ 0· 49·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (overlaying synchronized lyrics onto video) match the declared primary credential (NEMO_TOKEN), the declared config path (~/.config/nemovideo/), and the SKILL.md which calls NemoVideo rendering and upload endpoints. Nothing requested appears unrelated to the stated purpose.
Instruction Scope
Instructions stay within the lyric-video workflow (check/generate token, create a session, upload video, request render/export). They explicitly read/write ~/.config/nemovideo/client_id and call NemoVideo endpoints (including SSE for streaming responses). This is expected for a cloud render workflow, but the skill will upload user media and metadata to an external host (mega-api-prod.nemovideo.ai) — users should be aware their audio/video is sent to a third party.
Install Mechanism
No install spec or code is provided (instruction-only skill). Nothing will be downloaded or written beyond the runtime behavior described in SKILL.md.
Credentials
Only one credential is declared (NEMO_TOKEN), which is appropriate. The SKILL.md also supports generating an anonymous token by posting a client_id and saving it under ~/.config/nemovideo/, then using that token for requests — this is reasonable but slightly inconsistent with declaring NEMO_TOKEN as the primary credential (the skill can operate without a pre-provided env var). No unrelated secrets or multiple external credentials are requested.
Persistence & Privilege
The skill is not always-included and does not request elevated platform privileges. Its only filesystem interaction is a per-service config path (~/.config/nemovideo/) for a client_id/token, which is consistent with its purpose and does not modify other skills or global agent settings.
Assessment
This skill is coherent with a cloud-based lyric-video service, but it will upload your audio/video and save a client_id/token under ~/.config/nemovideo/ and send data to mega-api-prod.nemovideo.ai. Before installing/use: (1) confirm you are comfortable with your media being sent to NemoVideo and review their privacy/terms on nemovideo.com, (2) consider providing your own NEMO_TOKEN if you want explicit control instead of the skill generating an anonymous token, (3) verify the service domain and repository if you need provenance, and (4) avoid sending sensitive/private audio/video to any third-party rendering service. If you want, I can point out the exact API calls the skill will make or help you redact/export only trimmed/test content for an initial trial.Like a lobster shell, security has layers — review code before you run it.
latestvk97fynzbtqf2j1jt43ew50s72x83wwsc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
Primary envNEMO_TOKEN