Ai Subtitles Free
v1.0.0Turn a 3-minute YouTube video in MP4 format into 1080p captioned video files just by typing what you need. Whether it's adding subtitles to videos automatica...
⭐ 0· 24·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill name/description (generate and embed subtitles) aligns with the single required credential (NEMO_TOKEN) and the API endpoints described. Minor inconsistency: registry metadata at the top of the report listed no required config paths, while the SKILL.md frontmatter includes a configPaths value (~/.config/nemovideo/). This is likely a metadata mismatch but should be reconciled.
Instruction Scope
SKILL.md is an instruction-only runtime spec that limits actions to: obtain/use NEMO_TOKEN (or request an anonymous token), create a session, upload video files, call render/export endpoints, and poll status. It does instruct the agent to read this file's YAML frontmatter at runtime and to detect install path prefixes (~/.clawhub/, ~/.cursor/skills/) to set an attribution header — these are limited filesystem checks but are not strictly necessary for subtitle generation and are worth noting.
Install Mechanism
There is no install spec and no code files; this is instruction-only and thus does not write or execute new code on disk. That is the lowest-risk install model.
Credentials
The only required environment variable is NEMO_TOKEN (declared as primaryEnv). The SKILL.md provides a fallback flow to obtain an anonymous token via the service's auth endpoint if NEMO_TOKEN is absent. No unrelated secrets or multiple credentials are requested.
Persistence & Privilege
always is false and the skill does not request elevated persistent platform privileges or modification of other skills. It will make network calls to the external rendering service and may poll for job status, which is expected for this function.
Scan Findings in Context
[no-findings] expected: The regex-based scanner found nothing because this is an instruction-only skill with no code files; absence of findings is expected but not evidence of safety.
Assessment
This skill appears to do what it says: it uploads videos to nemovideo.ai to produce captioned MP4s and needs a NEMO_TOKEN (or it will request a temporary anonymous token). Before installing, consider: (1) Privacy — video files will be uploaded to an external service; do not upload sensitive content unless you trust nemovideo.ai and reviewed its retention/privacy policy. (2) Credentials — only provide NEMO_TOKEN if it is specifically for this service; the skill can also request an anonymous token automatically. (3) Filesystem access — the skill asks the agent to read the skill frontmatter and check a couple of install-path prefixes to set attribution headers; while limited, this reads your home dir and is unnecessary for core functionality. (4) Metadata mismatch — the registry metadata and SKILL.md disagree about config paths; verify which is correct. If you need a stricter review, ask for the exact network request bodies and a privacy/retention policy or the service owner identity (source/homepage is unknown).Like a lobster shell, security has layers — review code before you run it.
latestvk97f8k66xw7sg9wysk0egx4vqn84w9z2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN