Ai Video Color Grading
v1.0.0Professional color correction and color grading for any video with AI — transform flat raw footage into cinematic, branded, or mood-specific visuals. NemoVid...
⭐ 0· 54·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to call a NemoVideo service for color grading; the declared primary credential NEMO_TOKEN is consistent with an API-based service. However the registry metadata lists no required env vars while also naming a primaryEnv (NEMO_TOKEN) — a small inconsistency. The declared config path (~/.config/nemovideo/) is plausible for storing the service config, but because the skill has no source/homepage, this raises a transparency concern.
Instruction Scope
The SKILL.md (instruction-only) describes uploading video and describing the desired look — that aligns with the stated purpose. Because the file is truncated in the provided bundle, I cannot fully confirm there are no instructions that read unrelated files or environment variables. Expect the skill to transmit user video data to an external service (NemoVideo); confirm the destination and data retention policy before use.
Install Mechanism
No install spec and no code files — lowest install risk. The skill will not write new binaries or run an installer as part of its package.
Credentials
Requesting one primary credential (NEMO_TOKEN) is proportionate for an external API service. The metadata's empty requires.env list vs. primaryEnv mismatch should be clarified. The declared config path could contain other secrets if users have previously stored credentials there — confirm the skill only reads its own service config and nothing else.
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous-invocation settings. It does not request elevated persistence or modification of other skills.
Assessment
This instruction-only skill appears coherent for an API-based video grading service, but the source is unknown and some metadata is inconsistent. Before installing or providing credentials: 1) Confirm the service endpoint(s) it calls and read the privacy/retention policy — your videos will likely be uploaded to an external server. 2) Ask the publisher for a homepage or source code so you can inspect behavior. 3) Verify why NEMO_TOKEN is needed and whether it can be scoped/limited; do not reuse a token that grants broad access to other accounts. 4) Confirm the skill only reads ~/.config/nemovideo/ (its own config) and nothing else in your home directory. 5) Test first with non-sensitive sample footage. 6) If you remove the skill, rotate/revoke the NEMO_TOKEN. If the publisher cannot provide clear endpoints, privacy terms, or source, treat the skill as higher risk and avoid uploading confidential videos.Like a lobster shell, security has layers — review code before you run it.
latestvk974drecr0qhc4sjp7m38e2m6x83rg90
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎨 Clawdis
Primary envNEMO_TOKEN