Best Free Youtube Video
v1.0.0create raw video footage into polished YouTube videos with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. YouTubers use it for creating free h...
⭐ 0· 21·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to perform cloud-based AI video editing and its SKILL.md lists API endpoints on mega-api-prod.nemovideo.ai, upload and render endpoints, and requires a single service token (NEMO_TOKEN). Requiring a service token and upload endpoints is coherent with the stated purpose.
Instruction Scope
Instructions are primarily scoped to authenticating, creating a session, uploading user media, and polling render status — all expected for a cloud render service. The skill also instructs the agent to read the file's YAML frontmatter for attribution headers and to detect the skill install path (~/.clawhub/ or ~/.cursor/skills/) to set X-Skill-Platform; this requires inspecting local paths/config which is outside pure media processing but appears limited to attribution purposes. There is no broad instruction to read unrelated user files or system secrets.
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk or downloaded at install time. This minimizes install-time risk.
Credentials
Only one environment credential is declared (NEMO_TOKEN), which is proportional for a service that requires authentication. The SKILL.md also supports auto-generating an anonymous token via the service API if NEMO_TOKEN is not present, so a pre-existing secret is not strictly required. The frontmatter includes a config path (~/.config/nemovideo/) which is not listed in the registry's top-level metadata — this discrepancy should be clarified.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It will upload user media to the external nemovideo.ai backend (expected for this feature), which is the primary persistence/privacy consideration rather than any granted system privilege.
Assessment
This skill appears to do what it claims: upload your videos to a cloud rendering service that requires a service token. Before installing or using it, confirm the backend domain (mega-api-prod.nemovideo.ai) is a service you trust and review its privacy/terms for handling uploaded media. Note the skill will either use NEMO_TOKEN from your environment or request an anonymous token from the service (so you can use it without pre-provisioning credentials). There is a minor metadata inconsistency: the skill frontmatter references ~/.config/nemovideo/ while the registry metadata showed no config paths — ask the author to clarify what local files (if any) the skill will read or write. If your videos contain sensitive or private content you do not want sent to a third party, do not upload them. If you want higher confidence, request the skill's source/homepage or an official service link and confirm the API behavior independently.Like a lobster shell, security has layers — review code before you run it.
latestvk9775xb6p8xv4jk9djgmtaraed84n8zh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
