Ai Video Editor Instagram
v1.0.0edit raw video clips into Instagram-ready clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. Instagram creators use it for editing and...
⭐ 0· 15·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill name/description (Instagram video editing) matches the actions in SKILL.md: session creation, upload, render/export endpoints and credit checks. Requesting a single NEMO_TOKEN credential is proportionate for a hosted API. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata earlier claimed no required config paths.
Instruction Scope
Instructions remain focused on creating a session, uploading user media, running SSE-based edits, polling renders, and returning a download URL. This is appropriate for a cloud editor. Two points to watch: (1) the skill will POST to an external API to generate anonymous tokens if no NEMO_TOKEN is present (this is expected but means the agent will contact a third-party endpoint), and (2) the SKILL.md asks the runtime to 'auto-detect' install path for X-Skill-Platform — that could require reading runtime/agent environment details (not necessarily malicious, but underspecified).
Install Mechanism
No install spec and no code files (instruction-only) — lowest install risk. The skill relies entirely on runtime HTTP interactions with the nemovideo API; nothing is downloaded or written by an installer.
Credentials
The only required environment credential is NEMO_TOKEN (declared primary credential), which is reasonable. The SKILL.md describes generating and using an anonymous token if none exists. The earlier registry metadata said 'required config paths: none' but the SKILL.md frontmatter includes a config path (~/.config/nemovideo/) — this mismatch should be clarified. No unrelated secrets (AWS, OAuth tokens, etc.) are requested.
Persistence & Privilege
always is false and the skill does not request elevated or persistent system-wide privileges. It does not instruct modifying other skills or global agent settings. Autonomous invocation (disable-model-invocation=false) is normal platform behavior and not flagged alone.
Assessment
This skill appears to be a straightforward cloud video-editing integration: it will send any uploaded videos and edit commands to the nemovideo API and requires a single token (NEMO_TOKEN) to authorize requests. Before installing, verify the API/domain and owner (there's no homepage or source listed), and consider privacy: uploaded videos are processed on a remote GPU service — confirm how long they are stored and who can access them. Ask the publisher for source code, a privacy/data-retention policy, and clarification about the SKILL.md frontmatter vs. registry metadata mismatch (config path declared in SKILL.md). If you do not trust the nemovideo host or cannot obtain provenance, avoid supplying sensitive media or credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97dbcc846h5jcdq951b4ym0g584rkn5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
📱 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN