Ai Video Editor Higgsfield
v1.0.0edit raw video footage into cinematic edited clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. TikTok creators and social media filmma...
⭐ 0· 24·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (AI video editing, cloud GPU rendering) align with the behavior in SKILL.md: creating sessions, uploading video files, starting render jobs, polling status, and returning download URLs. Requesting a service token (NEMO_TOKEN) and hitting mega-api-prod.nemovideo.ai is appropriate for that purpose.
Instruction Scope
Instructions stay inside the expected domain (session creation, upload, render, SSE). They explicitly instruct the agent to upload user-provided media to the remote API and to stream/poll job state. Two minor scope items to note: (1) the skill instructs reading its own YAML frontmatter for attribution (expected), and (2) it suggests detecting install platform by probing user paths like ~/.clawhub/ and ~/.cursor/skills/ — this requires simple filesystem checks and is attributable-only, but is not strictly necessary for editing. Overall not malicious, but you should be aware media will be transmitted off-device.
Install Mechanism
No install spec or code is included (instruction-only skill). That minimizes disk persistence risk — nothing is downloaded or executed locally by the skill instructions.
Credentials
The skill requires a single credential (NEMO_TOKEN) which is appropriate for an API-backed editor. SKILL.md also references a config path (~/.config/nemovideo/) in its frontmatter metadata; the registry summary showed 'Required config paths: none', so there is a small metadata inconsistency to be aware of. Do not place unrelated secrets in NEMO_TOKEN; it should be a token scoped to this service.
Persistence & Privilege
The skill is not marked always:true and does not request elevated persistence or modification of other skills/configs. Autonomous invocation is allowed (platform default) but there is no additional privilege requested.
Assessment
This skill appears to do what it says — it uploads your videos to mega-api-prod.nemovideo.ai and performs cloud-side editing, so expect your media (and any metadata in the files) to be transmitted to that service. Before installing: (1) confirm you trust the nemovideo endpoint and review its privacy/terms if you will upload sensitive footage; (2) avoid putting unrelated secrets into NEMO_TOKEN — only supply a token intended for this service (or let the skill obtain an anonymous token); (3) note the skill may check local install paths and read its own frontmatter for attribution (harmless but filesystem access); and (4) there is a small metadata inconsistency (frontmatter lists a config path while the registry summary did not) — you may ask the skill author to clarify what local config, if any, is required.Like a lobster shell, security has layers — review code before you run it.
latestvk979yge3aqphdjrh3h5jz3jwth84sbzp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
