Subtitle Generator Online
v1.0.0Skip the learning curve of professional editing software. Describe what you want — generate subtitles in English and Spanish and burn them into the video — a...
⭐ 0· 52·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name, description, and runtime instructions all describe a cloud video subtitle/render service and the single required credential (NEMO_TOKEN) and API endpoints (mega-api-prod.nemovideo.ai) are coherent with that purpose. Minor metadata mismatch: the SKILL.md frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths.
Instruction Scope
Instructions stay within the stated purpose (session creation, upload, SSE, render/export polling). They include both multipart file upload examples (files=@/path) and URL uploads and assume the agent can upload user-supplied video files. The skill also instructs auto-generating an anonymous token via the service API if NEMO_TOKEN is not present. Slight behavioral assumptions that may be platform-dependent: auto-detecting install path for X-Skill-Platform and use of local file paths may not map cleanly to all client environments.
Install Mechanism
No install specification and no code files — instruction-only skill. This minimizes disk-write/execute risk.
Credentials
Only a single credential (NEMO_TOKEN) is requested, which is appropriate for a third‑party API. The frontmatter's mention of a config path (~/.config/nemovideo/) is not reflected in registry metadata — a minor inconsistency to clarify. The skill instructs generating a short-lived anonymous token via the service API if no token is provided (expected).
Persistence & Privilege
always is false and the skill does not request elevated platform privileges or modify other skills. Autonomous invocation is allowed (platform default) but that is not by itself a red flag here.
Scan Findings in Context
[no_code_files] expected: The skill is instruction-only (SKILL.md only), so the regex scanner found nothing to analyze. This is expected for this kind of skill.
Assessment
This skill appears to do what it says: it uploads videos to a cloud service and returns captioned/exported files using a single service token (NEMO_TOKEN). Before installing or using it: 1) Verify the API domain (mega-api-prod.nemovideo.ai) is the legitimate provider you expect. 2) Don’t supply long‑lived or unrelated credentials — only provide a NEMO_TOKEN issued by the service or use the anonymous token flow. 3) Understand privacy: uploaded videos are sent to the remote service; avoid sending sensitive content unless you trust their terms/privacy. 4) Ask the publisher to clarify the configPath discrepancy (~/.config/nemovideo/) and how X-Skill-Platform is determined in your environment. 5) If you’re uncomfortable with automatic network calls or autonomous agent invocation, avoid installing or only use with test content and a throwaway token.Like a lobster shell, security has layers — review code before you run it.
latestvk9729rpv3hjd9s7dvgjkrjn98n84nz89
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN