ClawHub

Online Course Video

v1.0.0

Online Course Video Maker — Create Educational Course and Lesson Videos. Works by connecting to the NemoVideo AI backend. Supports MP4, MOV, AVI, WebM, and M...

⭐ 0· 109·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill declares itself as a NemoVideo-backed course-video generator and only requires a single credential (NEMO_TOKEN) and a config directory (~/.config/nemovideo/) — both are coherent with a cloud video service. One minor inconsistency: the description claims "automatic credential setup on first use — no manual configuration needed" while metadata still lists NEMO_TOKEN as a required env var; this could be an editorial mismatch (automatic setup vs. manual token provision) but does not indicate unrelated privileges.
ℹ
Instruction Scope
SKILL.md is instruction-only and focuses on generating video content from user-provided course materials (slides, screen recordings, notebooks). This implies the agent will read user assets supplied as inputs and may upload them to the NemoVideo backend — expected for the stated purpose. There is no evidence in the provided excerpt that the instructions ask the agent to read arbitrary system files or unrelated environment variables beyond the declared NEMO_TOKEN and the config path.
✓
Install Mechanism
No install spec or binaries are present; the skill is instruction-only, so nothing is downloaded or written by an installer. This is low-risk and consistent with a wrapper/instruction skill.
✓
Credentials
The skill requires a single service token (NEMO_TOKEN) and lists a config path for storing credentials. That is proportionate for a cloud API client. There are no requests for unrelated secrets (AWS keys, GitHub tokens, etc.).
✓
Persistence & Privilege
always is false and the skill does not request elevated or permanent presence. The only persistent artifact implied is the ~/.config/nemovideo/ directory to store credentials — appropriate for a service client.
Assessment
This skill appears internally consistent with a cloud video production service, but before installing: 1) Confirm you trust NemoVideo (https://nemovideo.com and the apiDomain) because course assets and media will likely be uploaded to their backend. 2) Clarify how NEMO_TOKEN is obtained and stored (the SKILL.md mentions automatic setup but also lists NEMO_TOKEN as required). 3) Review NemoVideo's privacy and retention policy to ensure uploaded course materials and any student data are handled appropriately. 4) Store the token with least privilege and rotate it if you suspect misuse. 5) Avoid including sensitive secrets inside course assets (e.g., API keys, private data) that would be uploaded. If you want greater assurance, verify the referenced GitHub repository and confirm the exact runtime steps the skill will take when uploading or accessing files.

Like a lobster shell, security has layers — review code before you run it.

latestvk9756gc8nnd3m7v47y069htn9x83srkt

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎓 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments