ClawHub

Audio To Video

v1.0.0

convert audio files into captioned video files with this skill. Works with MP3, WAV, M4A, AAC files up to 200MB. podcasters and content creators use it for t...

⭐ 0· 19·0 current·0 all-time
by@whitejohnk-26
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description match the actions in SKILL.md: uploading audio, creating render jobs, and returning MP4s. The only mismatch is metadata: the SKILL.md frontmatter references a config path (~/.config/nemovideo/) that the registry metadata did not list as a required config path — this is a minor inconsistency but not obviously malicious.
ℹ
Instruction Scope
Instructions focus on connecting to a remote API, creating sessions, uploading files, streaming SSE, and exporting renders — all expected. The skill also instructs the agent to read its own frontmatter and detect an install path (e.g., ~/.clawhub/ or ~/.cursor/skills/) to set an X-Skill-Platform header; detecting install paths requires reading the agent's filesystem and is not strictly necessary for core functionality. Otherwise the runtime steps stay within the declared purpose.
✓
Install Mechanism
No install spec or code is included (instruction-only). This minimizes filesystem impact and is consistent with the stated cloud-based operation.
ℹ
Credentials
The skill only declares a single credential (NEMO_TOKEN) as primary, which is appropriate for a third-party rendering API. It will create an anonymous token if none is present. The frontmatter's mention of a config path (~/.config/nemovideo/) is not reflected in the registry metadata — if the agent actually accesses that path, it would broaden local file access beyond just reading SKILL.md.
✓
Persistence & Privilege
always:false and no special privileges requested. The skill does not request permanent presence or modifications to other skills or system-wide settings.
Assessment
This skill appears to do what it says: it uploads audio to nemovideo.ai and returns captioned MP4s, using NEMO_TOKEN if provided or obtaining a short-lived anonymous token otherwise. Before installing/use: 1) Confirm you trust the nemovideo.ai domain and are comfortable uploading any audio you send (sensitive audio may be exposed to their servers). 2) If you don't want the skill to probe your home directory for install paths or config files, check how your agent enforces filesystem access — the SKILL.md asks the agent to detect install paths and may read its own frontmatter. 3) Note the small metadata mismatch (frontmatter lists a config path not present in registry metadata); ask the publisher to clarify whether the skill will read ~/.config/nemovideo/. 4) Prefer using a dedicated NEMO_TOKEN from an account you control; anonymous tokens are short-lived and limited. If you need more assurance, request the publisher's homepage or source and verify their privacy policy and API behavior before uploading sensitive content.

Like a lobster shell, security has layers — review code before you run it.

latestvk974r4cg164g79v03kz262h5sh84mgt1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎙️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments