Video Editor Ai Model
v1.0.0Turn a 3-minute unedited screen recording into 1080p edited video files just by typing what you need. Whether it's automatically editing raw footage into a p...
⭐ 0· 26·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to perform cloud video editing and only requires a NEMO_TOKEN (used as a bearer token) which is consistent with calling a remote render API. However, the SKILL.md frontmatter lists a configPath (~/.config/nemovideo/) while the registry metadata reported no required config paths — this mismatch looks like sloppy metadata but is not sufficient alone to mark the skill as incoherent.
Instruction Scope
Instructions are focused on establishing a session, uploading video files, streaming SSE messages, polling render status, and returning download URLs. The skill does request reading/detecting install paths (to set X-Skill-Platform) and derives headers from the YAML frontmatter, but it does not instruct reading unrelated user files or other credentials.
Install Mechanism
This is an instruction-only skill with no install spec and no code files — lowest risk in terms of installed artifacts. All runtime behavior is via outgoing HTTP requests to the described backend.
Credentials
Only one credential (NEMO_TOKEN) is declared and used, which is proportionate to a cloud API. The SKILL.md also references a local config path (~/.config/nemovideo/) in its frontmatter; registry metadata earlier said no config paths. If the skill actually reads that path at runtime, it may access local config files beyond the single env var — worth confirming.
Persistence & Privilege
The skill is not force-included (always:false). It can be autonomously invoked like most skills (disable-model-invocation:false), which is expected. The skill does not request system-wide changes or other skills' credentials.
Assessment
This skill appears to be a front-end for a cloud video-rendering API and requests a single service token (NEMO_TOKEN). Before installing/using it: 1) Confirm the backend domain (mega-api-prod.nemovideo.ai) and that you trust that service with your video uploads — uploaded videos may contain sensitive content and will be transmitted to their servers. 2) Note the SKILL.md mentions a local config path (~/.config/nemovideo/) not listed in the registry — ask the author whether the skill will read that folder. 3) Anonymous tokens are described (100 free credits, 7-day expiry) — verify what user data is retained and how long. 4) If you need stronger assurance, request the skill source/homepage or prefer an official integration from a known vendor. Finally, because the skill uploads user files externally, avoid using it with sensitive footage until you verify privacy/retention and the service's terms.Like a lobster shell, security has layers — review code before you run it.
latestvk9783spagx74fc865ns1nfzkms84x6yh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
