Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Best Laptops For Video Editing

v1.0.0

Skip the learning curve of professional editing software. Describe what you want — trim the shaky clips, color grade the footage, and add smooth transitions...

0· 39·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dsewell-583h0/best-laptops-for-video-editing.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Best Laptops For Video Editing" (dsewell-583h0/best-laptops-for-video-editing) from ClawHub.
Skill page: https://clawhub.ai/dsewell-583h0/best-laptops-for-video-editing
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: NEMO_TOKEN
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install best-laptops-for-video-editing

ClawHub CLI

Package manager switcher

npx clawhub@latest install best-laptops-for-video-editing
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill is named and advertised as 'Best Laptops For Video Editing' and appears to promise laptop recommendations, but the SKILL.md implements a cloud AI video-editing service (uploading footage, creating sessions, rendering on nemovideo.ai). The declared registry metadata earlier listed no config paths, yet the SKILL.md frontmatter requires a NEMO_TOKEN and references a config path (~/.config/nemovideo/). This mismatch between name/description, registry metadata, and the actual instructions is incoherent and could be accidental or intentional mislabeling.
!
Instruction Scope
The SKILL.md tells the agent to accept user video uploads (up to 500MB), POST them to https://mega-api-prod.nemovideo.ai, create sessions, poll render status, and save session_id and use NEMO_TOKEN for Authorization. Those actions are consistent with a cloud editor but are out of scope for a skill that claims to be a laptop-buying helper. The instructions also require adding specific attribution headers and instruct the agent to persist session tokens (and not to print them). The skill does not instruct reading unrelated system files, but the frontmatter's referenced config path (~/.config/nemovideo/) implies the agent might access local config — registry metadata did not declare this, so the scope is ambiguous.
Install Mechanism
Instruction-only skill with no install spec and no code files — minimal install risk. Nothing will be downloaded or written by an installer step as part of the skill package itself.
!
Credentials
Only a single credential (NEMO_TOKEN) is required, which is appropriate for a cloud editing API. However, the SKILL.md both expects an externally-provided NEMO_TOKEN and describes generating an anonymous token via the API if missing. The frontmatter also references a local config path (~/.config/nemovideo/) even though the registry said no config paths — this discrepancy is unexplained. Before installing, confirm what NEMO_TOKEN grants (access, retention, billing) and whether storing session_id or token locally is acceptable.
Persistence & Privilege
The skill does not request always:true and uses normal autonomous invocation defaults. It instructs saving a session_id and using/storing a token for API calls, which is normal for a remote service. There is no instruction to modify other skills or global agent configuration.
What to consider before installing
This skill's behavior does not match its name: instead of recommending laptops it implements a cloud video-editing service that uploads your footage to https://mega-api-prod.nemovideo.ai and requires a NEMO_TOKEN. Before installing, consider: (1) Do you trust nemovideo.ai with your videos and metadata? Check privacy, retention, and billing policies. (2) Verify where NEMO_TOKEN comes from and what permissions it grants; prefer short-lived or anonymous tokens if possible. (3) Confirm whether the skill will read or write files in ~/.config/nemovideo/ (frontmatter mentions it but registry metadata does not) — ask the author to clarify. (4) If you expected only laptop-buying advice, do not install this skill; ask the publisher why the name/description differ from functionality. (5) If you proceed, test with non-sensitive sample videos and monitor outgoing network requests and stored tokens. If you can, obtain an authoritative source/homepage for the skill or prefer an officially published integration.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
latestvk97b8y4y2y5t9qtqvgppapa9zh85krxn
39downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Getting Started

Got raw footage to work with? Send it over and tell me what you need — I'll take care of the AI video editing.

Try saying:

  • "edit a 3-minute 4K camera recording into a 4K MP4"
  • "trim the shaky clips, color grade the footage, and add smooth transitions"
  • "editing high-resolution video footage without a powerful laptop for video editors"

Automatic Setup

On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".

Token: If NEMO_TOKEN environment variable is already set, use it and skip to Session below.

Free token: Generate a UUID as client identifier, then POST to https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token with header X-Client-Id: <uuid>. The response field data.token becomes your NEMO_TOKEN (100 credits, 7-day expiry).

Session: POST to https://mega-api-prod.nemovideo.ai/api/tasks/me/with-session/nemo_agent with Bearer auth and body {"task_name":"project"}. Save session_id from the response.

Confirm to the user you're connected and ready. Don't print tokens or raw JSON.

Best Laptops for Video Editing — Edit and Export 4K Videos

Drop your raw footage in the chat and tell me what you need. I'll handle the AI video editing on cloud GPUs — you don't need anything installed locally.

Here's a typical use: you send a a 3-minute 4K camera recording, ask for trim the shaky clips, color grade the footage, and add smooth transitions, and about 1-2 minutes later you've got a MP4 file ready to download. The whole thing runs at 4K by default.

One thing worth knowing — uploading shorter clips under 2 minutes gives you faster render times and more precise AI cuts.

Matching Input to Actions

User prompts referencing best laptops for video editing, aspect ratio, text overlays, or audio tracks get routed to the corresponding action via keyword and intent classification.

User says...ActionSkip SSE?
"export" / "导出" / "download" / "send me the video"→ §3.5 Export
"credits" / "积分" / "balance" / "余额"→ §3.3 Credits
"status" / "状态" / "show tracks"→ §3.4 State
"upload" / "上传" / user sends file→ §3.2 Upload
Everything else (generate, edit, add BGM…)→ §3.1 SSE

Cloud Render Pipeline Details

Each export job queues on a cloud GPU node that composites video layers, applies platform-spec compression (H.264, up to 1080x1920), and returns a download URL within 30-90 seconds. The session token carries render job IDs, so closing the tab before completion orphans the job.

All calls go to https://mega-api-prod.nemovideo.ai. The main endpoints:

  1. SessionPOST /api/tasks/me/with-session/nemo_agent with {"task_name":"project","language":"<lang>"}. Gives you a session_id.
  2. Chat (SSE)POST /run_sse with session_id and your message in new_message.parts[0].text. Set Accept: text/event-stream. Up to 15 min.
  3. UploadPOST /api/upload-video/nemo_agent/me/<sid> — multipart file or JSON with URLs.
  4. CreditsGET /api/credits/balance/simple — returns available, frozen, total.
  5. StateGET /api/state/nemo_agent/me/<sid>/latest — current draft and media info.
  6. ExportPOST /api/render/proxy/lambda with render ID and draft JSON. Poll GET /api/render/proxy/lambda/<id> every 30s for completed status and download URL.

Formats: mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac.

Three attribution headers are required on every request and must match this file's frontmatter:

HeaderValue
X-Skill-Sourcebest-laptops-for-video-editing
X-Skill-Versionfrontmatter version
X-Skill-Platformauto-detect: clawhub / cursor / unknown from install path

All requests must include: Authorization: Bearer <NEMO_TOKEN>, X-Skill-Source, X-Skill-Version, X-Skill-Platform. Missing attribution headers will cause export to fail with 402.

Draft field mapping: t=tracks, tt=track type (0=video, 1=audio, 7=text), sg=segments, d=duration(ms), m=metadata.

Timeline (3 tracks): 1. Video: city timelapse (0-10s) 2. BGM: Lo-fi (0-10s, 35%) 3. Title: "Urban Dreams" (0-3s)

Translating GUI Instructions

The backend responds as if there's a visual interface. Map its instructions to API calls:

  • "click" or "点击" → execute the action via the relevant endpoint
  • "open" or "打开" → query session state to get the data
  • "drag/drop" or "拖拽" → send the edit command through SSE
  • "preview in timeline" → show a text summary of current tracks
  • "Export" or "导出" → run the export workflow

SSE Event Handling

EventAction
Text responseApply GUI translation (§4), present to user
Tool call/resultProcess internally, don't forward
heartbeat / empty data:Keep waiting. Every 2 min: "⏳ Still working..."
Stream closesProcess final response

~30% of editing operations return no text in the SSE stream. When this happens: poll session state to verify the edit was applied, then summarize changes to the user.

Error Handling

CodeMeaningAction
0SuccessContinue
1001Bad/expired tokenRe-auth via anonymous-token (tokens expire after 7 days)
1002Session not foundNew session §3.0
2001No creditsAnonymous: show registration URL with ?bind=<id> (get <id> from create-session or state response when needed). Registered: "Top up credits in your account"
4001Unsupported fileShow supported formats
4002File too largeSuggest compress/trim
400Missing X-Client-IdGenerate Client-Id and retry (see §1)
402Free plan export blockedSubscription tier issue, NOT credits. "Register or upgrade your plan to unlock export."
429Rate limit (1 token/client/7 days)Retry in 30s once

Tips and Tricks

The backend processes faster when you're specific. Instead of "make it look better", try "trim the shaky clips, color grade the footage, and add smooth transitions" — concrete instructions get better results.

Max file size is 500MB. Stick to MP4, MOV, AVI, ProRes for the smoothest experience.

H.264 codec gives the best balance of quality and file size for final exports.

Common Workflows

Quick edit: Upload → "trim the shaky clips, color grade the footage, and add smooth transitions" → Download MP4. Takes 1-2 minutes for a 30-second clip.

Batch style: Upload multiple files in one session. Process them one by one with different instructions. Each gets its own render.

Iterative: Start with a rough cut, preview the result, then refine. The session keeps your timeline state so you can keep tweaking.

Comments

Loading comments...