ClawHub

Online Tutoring Promo Video

v1.0.0

Your online tutoring service has a 94% grade improvement rate, tutors with degrees from top universities, and a scheduling system that matches students with...

⭐ 0· 33·0 current·0 all-time
by@siddylcon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to create promotional videos and the SKILL.md shows a single API call to a video-generation service (nemovideo.ai) using an API token. Requiring an API token (NEMO_TOKEN) is coherent with that purpose.
ℹ
Instruction Scope
Runtime instructions are narrowly scoped to one POST request to the NemoVideo API with the NEMO_TOKEN; they do not instruct reading unrelated files or environment variables. However, the SKILL.md metadata includes a configPaths entry (~/.config/nemovideo/) that is not referenced elsewhere and the registry summary lists no required config paths — this metadata mismatch should be clarified.
✓
Install Mechanism
No install steps or packages are declared (instruction-only skill). Nothing is written to disk by the skill definition itself, which is the lowest-risk install profile.
✓
Credentials
Only one credential (NEMO_TOKEN) is required and it is used directly in the provided curl example to authenticate to the Nemovideo API. This is proportionate to the stated functionality. There is no request for unrelated secrets or multiple service credentials.
✓
Persistence & Privilege
The skill is not marked always:true and does not request system-wide changes; it does not appear to require elevated persistence or privileges.
Assessment
This skill is internally consistent with its stated purpose, but confirm a few things before installing: (1) Verify the NemoVideo service and domain (mega-api-prod.nemovideo.ai) are legitimate for your organization before supplying NEMO_TOKEN; (2) Use a token with minimal scope and avoid reusing broader credentials; (3) Investigate the SKILL.md metadata mismatch about ~/.config/nemovideo/ (the registry summary shows no required config path) — ask the publisher whether the skill will read that config directory; (4) Do not include sensitive student PII in requests unless you have reviewed the vendor's privacy and data handling policies. If you cannot verify the service origin or token scope, treat this skill cautiously.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dtqpg4a1h3qx1qwphbhtn7d848599

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📚 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments