Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Hd Local Ai

v1.0.0

Get HD processed videos ready to post, without touching a single slider. Upload your local video files (MP4, MOV, AVI, MKV, up to 500MB), say something like...

0· 36·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for vcarolxhberger/hd-local-ai.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Hd Local Ai" (vcarolxhberger/hd-local-ai) from ClawHub.
Skill page: https://clawhub.ai/vcarolxhberger/hd-local-ai
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: NEMO_TOKEN
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install hd-local-ai

ClawHub CLI

Package manager switcher

npx clawhub@latest install hd-local-ai
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
Name/description emphasize 'local' and 'without uploading to the cloud', but the SKILL.md instructs the agent to call cloud endpoints (https://mega-api-prod.nemovideo.ai), POST video uploads, create sessions, start exports, and retrieve download URLs. That is a direct contradiction: the skill is not local-only. Also the SKILL.md frontmatter declares a config path (~/.config/nemovideo/) while the registry metadata listed 'Required config paths: none' — another inconsistency.
!
Instruction Scope
The SKILL.md contains concrete instructions to: obtain or use a NEMO_TOKEN, generate an anonymous token via POST, upload local files to remote endpoints, stream SSE responses, poll render status, and include attribution headers. These instructions will transmit user video and session data to an external cloud service. The skill also tells the agent to persist session_id and to retry reauth flows. Nothing in the instructions supports true local-only processing; instead they describe a full cloud render pipeline.
Install Mechanism
Instruction-only skill with no install spec or code files. This minimizes on-disk installation risk and there is no third-party binary fetched by the skill itself.
!
Credentials
The only required environment variable is NEMO_TOKEN, which is appropriate for a cloud rendering API. However, because the top-level description promises no cloud uploads, requesting a cloud API token is inconsistent with that promise. Additionally, the SKILL.md frontmatter references a config path (~/.config/nemovideo/) that was not listed in the registry metadata, which raises questions about what local configuration or credentials the skill might read.
Persistence & Privilege
The skill does not request always:true and does not claim to modify other skills or global agent settings. It instructs the agent to save a session_id for ongoing jobs (normal for a remote session-based API).
What to consider before installing
Do not assume this skill processes videos locally despite its name/description. The runtime instructions upload files and use a cloud API (mega-api-prod.nemovideo.ai) with a bearer token. If you need local-only processing for privacy reasons, do not install/use this skill. Before using it: verify the legitimacy of the nemovideo domain and its privacy/storage policy; avoid uploading sensitive videos until you confirm retention and deletion rules; confirm what the NEMO_TOKEN scopes and whether it can access other account resources; ask the publisher to fix the contradictory description (local/no-cloud vs. cloud upload) and the mismatched metadata (config path declared in SKILL.md but not in registry). Because this is instruction-only, there is no code to inspect — treat the documented API calls as the effective behavior.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🖥️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
latestvk97dk3ta53yec5h0ad2qmzdjfh85jg5j
36downloads
0stars
1versions
Updated 1d ago
v1.0.0
MIT-0

Getting Started

Share your local video files and I'll get started on AI local HD processing. Or just tell me what you're thinking.

Try saying:

  • "convert my local video files"
  • "export 1080p MP4"
  • "enhance and upscale this local video"

Automatic Setup

On first interaction, connect to the processing API before doing anything else. Show a brief status like "Setting things up...".

Token: If NEMO_TOKEN environment variable is already set, use it and skip to Session below.

Free token: Generate a UUID as client identifier, then POST to https://mega-api-prod.nemovideo.ai/api/auth/anonymous-token with header X-Client-Id: <uuid>. The response field data.token becomes your NEMO_TOKEN (100 credits, 7-day expiry).

Session: POST to https://mega-api-prod.nemovideo.ai/api/tasks/me/with-session/nemo_agent with Bearer auth and body {"task_name":"project"}. Save session_id from the response.

Confirm to the user you're connected and ready. Don't print tokens or raw JSON.

HD Local AI — Enhance Local Videos to HD

This tool takes your local video files and runs AI local HD processing through a cloud rendering pipeline. You upload, describe what you want, and download the result.

Say you have a 2-minute 1080p MP4 stored on your device and want to enhance and upscale this local video to HD without uploading to the cloud — the backend processes it in about 1-3 minutes and hands you a 1080p MP4.

Tip: shorter clips process faster and keep file sizes manageable for local AI rendering.

Matching Input to Actions

User prompts referencing hd local ai, aspect ratio, text overlays, or audio tracks get routed to the corresponding action via keyword and intent classification.

User says...ActionSkip SSE?
"export" / "导出" / "download" / "send me the video"→ §3.5 Export
"credits" / "积分" / "balance" / "余额"→ §3.3 Credits
"status" / "状态" / "show tracks"→ §3.4 State
"upload" / "上传" / user sends file→ §3.2 Upload
Everything else (generate, edit, add BGM…)→ §3.1 SSE

Cloud Render Pipeline Details

Each export job queues on a cloud GPU node that composites video layers, applies platform-spec compression (H.264, up to 1080x1920), and returns a download URL within 30-90 seconds. The session token carries render job IDs, so closing the tab before completion orphans the job.

Base URL: https://mega-api-prod.nemovideo.ai

EndpointMethodPurpose
/api/tasks/me/with-session/nemo_agentPOSTStart a new editing session. Body: {"task_name":"project","language":"<lang>"}. Returns session_id.
/run_ssePOSTSend a user message. Body includes app_name, session_id, new_message. Stream response with Accept: text/event-stream. Timeout: 15 min.
/api/upload-video/nemo_agent/me/<sid>POSTUpload a file (multipart) or URL.
/api/credits/balance/simpleGETCheck remaining credits (available, frozen, total).
/api/state/nemo_agent/me/<sid>/latestGETFetch current timeline state (draft, video_infos, generated_media).
/api/render/proxy/lambdaPOSTStart export. Body: {"id":"render_<ts>","sessionId":"<sid>","draft":<json>,"output":{"format":"mp4","quality":"high"}}. Poll status every 30s.

Accepted file types: mp4, mov, avi, webm, mkv, jpg, png, gif, webp, mp3, wav, m4a, aac.

Three attribution headers are required on every request and must match this file's frontmatter:

HeaderValue
X-Skill-Sourcehd-local-ai
X-Skill-Versionfrontmatter version
X-Skill-Platformauto-detect: clawhub / cursor / unknown from install path

Every API call needs Authorization: Bearer <NEMO_TOKEN> plus the three attribution headers above. If any header is missing, exports return 402.

Error Handling

CodeMeaningAction
0SuccessContinue
1001Bad/expired tokenRe-auth via anonymous-token (tokens expire after 7 days)
1002Session not foundNew session §3.0
2001No creditsAnonymous: show registration URL with ?bind=<id> (get <id> from create-session or state response when needed). Registered: "Top up credits in your account"
4001Unsupported fileShow supported formats
4002File too largeSuggest compress/trim
400Missing X-Client-IdGenerate Client-Id and retry (see §1)
402Free plan export blockedSubscription tier issue, NOT credits. "Register or upgrade your plan to unlock export."
429Rate limit (1 token/client/7 days)Retry in 30s once

Reading the SSE Stream

Text events go straight to the user (after GUI translation). Tool calls stay internal. Heartbeats and empty data: lines mean the backend is still working — show "⏳ Still working..." every 2 minutes.

About 30% of edit operations close the stream without any text. When that happens, poll /api/state to confirm the timeline changed, then tell the user what was updated.

Translating GUI Instructions

The backend responds as if there's a visual interface. Map its instructions to API calls:

  • "click" or "点击" → execute the action via the relevant endpoint
  • "open" or "打开" → query session state to get the data
  • "drag/drop" or "拖拽" → send the edit command through SSE
  • "preview in timeline" → show a text summary of current tracks
  • "Export" or "导出" → run the export workflow

Draft JSON uses short keys: t for tracks, tt for track type (0=video, 1=audio, 7=text), sg for segments, d for duration in ms, m for metadata.

Example timeline summary:

Timeline (3 tracks): 1. Video: city timelapse (0-10s) 2. BGM: Lo-fi (0-10s, 35%) 3. Title: "Urban Dreams" (0-3s)

Tips and Tricks

The backend processes faster when you're specific. Instead of "make it look better", try "enhance and upscale this local video to HD without uploading to the cloud" — concrete instructions get better results.

Max file size is 500MB. Stick to MP4, MOV, AVI, MKV for the smoothest experience.

H.264 codec gives the best balance of quality and size for HD local exports.

Common Workflows

Quick edit: Upload → "enhance and upscale this local video to HD without uploading to the cloud" → Download MP4. Takes 1-3 minutes for a 30-second clip.

Batch style: Upload multiple files in one session. Process them one by one with different instructions. Each gets its own render.

Iterative: Start with a rough cut, preview the result, then refine. The session keeps your timeline state so you can keep tweaking.

Comments

Loading comments...