Auto Caption Online
v1.0.0content creators and marketers add video files into captioned video files using this skill. Accepts MP4, MOV, AVI, WebM up to 500MB, renders on cloud GPUs at...
⭐ 0· 0·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is named and described as an online auto-captioning service and its runtime instructions exclusively describe uploading video files, creating a session, sending SSE messages, polling render status, and downloading results. Requesting a single service token (NEMO_TOKEN) is coherent with the stated cloud-rendering purpose.
Instruction Scope
Instructions limit actions to API calls to the nemo backend, file uploads, SSE reading, session management, and error handling. They also instruct detecting install path (to set X-Skill-Platform) and reading frontmatter values for attribution headers; this requires access to the agent's environment/paths to determine platform, which is reasonable for attribution but should be noted. No instructions ask for unrelated local files or unrelated environment variables.
Install Mechanism
There is no install spec and no code files — the skill is instruction-only, so nothing is downloaded or written to disk by the skill itself. This is the lowest-risk install model.
Credentials
The skill only requires a single credential, NEMO_TOKEN, which is appropriate for a cloud API. It also instructs how to obtain an anonymous token if none is present. One minor inconsistency: the registry metadata lists no required config paths, while the SKILL.md frontmatter names '~/.config/nemovideo/' as a configPath — this mismatch should be clarified.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-level privileges. Autonomous invocation is allowed (platform default) but not combined with broad credential requests, so exposure is limited to the single service token and operations described.
Assessment
This skill appears to do what it says: it uploads videos to a remote nemo-backend (mega-api-prod.nemovideo.ai) for cloud GPU captioning and needs a single token (NEMO_TOKEN). Before installing or using it: 1) Be aware your videos will be sent to an external service — avoid sending sensitive or private footage unless you trust the service. 2) The skill's source/homepage is missing and owner metadata is minimal; if you plan to use it in production, verify the service/operator and privacy/retention policies. 3) Confirm the small metadata mismatch (SKILL.md references '~/.config/nemovideo/' while registry metadata listed no config paths) with the publisher to ensure no unexpected file access. If you need higher assurance, request a published homepage, privacy policy, or official service documentation before using the skill with real content.Like a lobster shell, security has layers — review code before you run it.
latestvk97643v8r3p5e8garkw8sraz7d84mkct
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN