ClawHub

Ai Video Editor Mod

v1.0.0

edit raw video footage into edited MP4 clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators and social media users use i...

⭐ 0· 22·0 current·0 all-time
by@nemovideonemo
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (AI video editing) match the declared requirement (NEMO_TOKEN) and the SKILL.md which describes uploading media, creating sessions, SSE streaming and rendering on a remote API. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
Instructions are focused on creating a session, uploading media, starting renders, and handling SSE. Two items worth noting: (1) the skill instructs generating an anonymous token by POSTing to an external endpoint if NEMO_TOKEN is not set (so it can operate without a pre-provided secret), and (2) it instructs reading the skill's frontmatter and detecting an install path to produce attribution headers — this implies the agent will parse its own SKILL.md and possibly inspect install-path-like strings, but it does not demand reading unrelated user files. The skill requires uploading user media to the external API (expected for this purpose) — users should consider privacy of uploaded content.
✓
Install Mechanism
No install spec and no code files — instruction-only. This is the lowest-risk install mechanism: nothing new will be written to disk by an installer step.
✓
Credentials
Only one credential is declared (NEMO_TOKEN) and it is clearly tied to the external video-processing API. The skill can also obtain a short-lived anonymous token itself, which is coherent for anonymous usage. No other secrets or unrelated env vars are requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-wide changes or access to other skills' config. It does instruct saving session_id and using tokens for API calls (normal for a remote service). Autonomous invocation is allowed (platform default) but not combined with other high-risk flags.
Assessment
This skill appears to do what it says — remotely edit videos via the nemo API. Before installing/use: (1) remember using the skill uploads your media to https://mega-api-prod.nemovideo.ai — do not send sensitive or private footage you wouldn't want on that service; (2) the skill will use a NEMO_TOKEN (you can provide one or it will create a short-lived anonymous token); treat that token like a credential and revoke it if you notice misuse; (3) there is no installer, but network activity will occur (file uploads, SSE streams) — ensure you trust the domain and the service’s privacy/retention policy and that uploads comply with copyright/privacy rules; (4) if you need stricter control, require that the skill use only user-provided tokens and avoid anonymous token generation. Overall the skill is internally consistent with its claimed purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk975dcphyz14bfzxr6w59ed2a984x4t4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments