ClawHub

Caption Burner

v1.0.0

Get hardcoded captioned videos ready to post, without touching a single slider. Upload your video files (MP4, MOV, AVI, WebM, up to 500MB), say something lik...

⭐ 0· 21·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (burn captions into video) align with the declared requirement (NEMO_TOKEN) and the SKILL.md, which describes uploading video files and calling a remote rendering API. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to: use NEMO_TOKEN (or obtain an anonymous token), create sessions, upload files, poll render status, and read the skill's YAML frontmatter and detect install path for attribution headers. Reading the skill frontmatter / install path implies filesystem access to the skill files — this is reasonable for adding attribution headers but is broader than a pure 'API-only' description and should be expected.
✓
Install Mechanism
No install steps or external downloads are present (instruction-only). That minimizes on-disk risk; all processing is offloaded to the remote service.
✓
Credentials
Only a single credential (NEMO_TOKEN) is required and is used directly by the instructions. The metadata's optional config path (~/.config/nemovideo/) is plausible for a client caching tokens/config and is not excessive.
✓
Persistence & Privilege
always:false and normal autonomous invocation are used. The skill does not request persistent system-wide privileges or modification of other skills. It does ask the agent to read its own skill frontmatter/install path for attribution, which is limited in scope.
Assessment
This skill appears to do what it says: it uploads your video files and a token to a remote service (mega-api-prod.nemovideo.ai) for server-side caption burning. Before installing, confirm you trust that external domain and its privacy practices because your videos (and the token) will be sent there. Note the skill may read its own SKILL.md/frontmatter and detect its install path to set attribution headers — this is normal for attribution but it means the agent will access skill files. If you do not want uploads to leave your device or you don't trust the service, do not enable the skill or avoid providing NEMO_TOKEN. If you need higher assurance, ask the maintainer for a public homepage, docs, or inspect network traffic / request/response samples from the service.

Like a lobster shell, security has layers — review code before you run it.

latestvk9743mnqw0vvtrmmnd3c4s8vm1853w41

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔤 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments