ClawHub

Highlight Editor Video

v1.0.0

Turn a 2-hour sports game recording into 1080p highlight reel clips just by typing what you need. Whether it's generating short highlight reels from long vid...

⭐ 0· 46·0 current·0 all-time
by@dsewell-583h0
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to produce highlight reels and only requests a single API token (NEMO_TOKEN) and calls a single external service (mega-api-prod.nemovideo.ai), which is proportionate to its stated purpose. Requiring an auth token to call the service is expected.
ℹ
Instruction Scope
Runtime instructions describe uploading user video and managing sessions/tokens on the remote API (expected). The skill also instructs the agent to read this SKILL.md frontmatter and detect install paths (~/.clawhub/, ~/.cursor/skills/) to set an attribution header — that requires reading local files/install paths (minor scope creep but explainable). The SKILL.md tells the agent how to obtain an anonymous token and to save session_id; it doesn't specify persistent storage location, which could lead to inconsistent handling across agents.
✓
Install Mechanism
Instruction-only skill with no install spec or code files — lowest-risk delivery. Nothing is downloaded or written by an installer step.
ℹ
Credentials
Only NEMO_TOKEN is required (declared as primaryEnv) which fits the API usage. Minor inconsistency: registry metadata listed no required config paths, but the SKILL.md frontmatter includes a config path (~/.config/nemovideo/). This mismatch should be clarified (does the skill need to read that directory?).
✓
Persistence & Privilege
Skill is not marked always:true and does not request system-wide privileges. It will create/use session tokens for the remote API but does not instruct altering other skill configs or system settings.
Assessment
This skill will upload whatever video you paste into the chat to an external API (mega-api-prod.nemovideo.ai) and it needs an access token (NEMO_TOKEN) — if you don't provide one, the skill will request an anonymous token on your behalf. Before installing or using: 1) Verify you trust the destination domain and understand its data retention/privacy policies (your raw footage is sent off-device). 2) Confirm how tokens and session IDs are stored by your agent (they may persist in memory or on disk). 3) Note the SKILL.md asks the agent to read its own frontmatter and check common skill install paths — this is likely harmless but you may want clarity on whether the skill will read other local files or the ~/.config/nemovideo/ directory (the registry and SKILL.md disagree). If these behaviors are acceptable, the skill is coherent for its stated purpose; if you need stronger guarantees, request the vendor/source or a verified homepage and privacy/retention details before sending private footage.

Like a lobster shell, security has layers — review code before you run it.

latestvk970a8v3paaavs6rfyvw5qh4rh84rz2n

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

✂️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments