ClawHub

Ai Video Editor Chatgpt

v1.0.0

edit raw video footage into AI-edited video clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators and marketers use it fo...

⭐ 0· 12·0 current·0 all-time
by@vcarolxhberger
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description claim AI video editing; SKILL.md details endpoints, upload, SSE, render and export flows all targeted at a single service (nemovideo). The only minor mismatch: the registry metadata lists no configPaths while the SKILL.md frontmatter metadata declares a configPaths entry (~/.config/nemovideo/). This is likely an editing/metadata inconsistency but does not change the skill's overall purpose.
ℹ
Instruction Scope
Instructions are focused on interacting with the remote nemovideo API (session creation, SSE, upload, export). They explicitly instruct uploading user-provided files to the cloud — expected for a cloud editor — and to detect the skill install path to set an attribution header. The skill also implements anonymous-token acquisition if NEMO_TOKEN is absent. No instructions ask for unrelated files, system credentials, or broad arbitrary data collection.
✓
Install Mechanism
No install spec or code files — this is instruction-only. That minimizes the on-disk attack surface and matches the declared lack of required binaries.
ℹ
Credentials
Only one env var is declared as required (NEMO_TOKEN) and the SKILL.md uses that token for Authorization. The skill can also obtain an anonymous token from the service if none is provided. No unrelated credentials (AWS, GitHub, etc.) are requested. Note again the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/) which the registry summary omitted; this could indicate the skill will look in that path for cached tokens/config — small inconsistency to be aware of.
✓
Persistence & Privilege
always is false and the skill uses ephemeral session tokens for operations. It does not request permanent platform-wide privileges or modify other skills. The service-side session_id is persisted only for job lifecycle, which is normal for a cloud render workflow.
Assessment
This skill is coherent for a cloud video-editing service: it will upload any video you provide to an external API (nemovideo.ai) and use a service token (NEMO_TOKEN) for authorization — if you don't supply a token it will request an anonymous one from the service. Before installing or using: (1) confirm you trust the external service and its privacy policy because your videos will leave your device; (2) prefer providing a scoped/throwaway token if you want account separation; (3) note the SKILL.md mentions looking in ~/.config/nemovideo/ and reading the agent install path for an attribution header — if you have sensitive files in those paths, consider cleaning them or deny access; (4) if you require higher assurance, ask the skill author for a canonical homepage/source or an audited client library before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk972q908nhzamefhh60ct29tmd84r5f3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments