Free Video Editor
v1.0.3Edit videos online with AI powered tools and effects — trim, cut, merge, add text, apply transitions, adjust speed, add music, color grade, and export profes...
⭐ 0· 151·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description describe an online AI video editor. Declared primary credential (NEMO_TOKEN) and a NemoVideo config path (~/.config/nemovideo/) are coherent with a service that hosts and processes user videos. There are no unrelated binaries or surprising permissions requested that contradict the stated purpose.
Instruction Scope
This is an instruction-only skill whose runtime instructions (SKILL.md) describe editing workflows that inherently require uploading or transferring user media to the NemoVideo service. That behavior is expected for this purpose, but it means user video/audio files will likely be sent to an external endpoint. The provided SKILL.md excerpt does not show instructions to read unrelated system files or other credentials, but the full file is truncated — confirm the full instructions don't request other environment vars or system paths beyond the declared config path.
Install Mechanism
No install spec and no code files — lowest install risk. Nothing is downloaded or written to disk by an installer in the registry metadata.
Credentials
Requesting a single service token (NEMO_TOKEN) is proportionate for an external editing API. However, metadata is slightly inconsistent: requires.env is empty while a primaryEnv (NEMO_TOKEN) is declared. Also the skill declares a config path (~/.config/nemovideo/), which is reasonable but gives the skill potential access to files in that location (e.g., tokens or config). Verify that the service token scope is limited and that no unrelated secrets are needed.
Persistence & Privilege
always:false (no forced presence) and the skill is user-invocable. There is no evidence it modifies other skills or requests persistent elevated privileges. Autonomous invocation is allowed by default but not, on its own, a concern.
Assessment
This skill appears to be what it says: an online AI video editor that needs a NemoVideo account token. Before installing, confirm you trust https://nemovideo.com and understand that your videos and audio will be uploaded to their servers for processing. Ask how long media are retained and whether the service will use content for training. Provide a least-privilege NEMO_TOKEN (if the service supports scoped or revocable keys) rather than long-lived credentials. Review the full SKILL.md for any instructions that read other files or request additional environment variables (the metadata currently lists a primary credential but not in requires.env — ask the publisher to clarify). Avoid sending highly sensitive audio/video content unless you accept the provider's privacy and retention policies. If possible, test with non-sensitive example media first and create a revocable token so you can disable access later.Like a lobster shell, security has layers — review code before you run it.
latestvk97bn9kkjwaxe34fe16eq9sdw583vgmp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎞️ Clawdis
Primary envNEMO_TOKEN