ClawHub

Recording Editor

v1.0.0

edit raw recordings into edited recording clips with this recording-editor skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators, educato...

⭐ 0· 46·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (cloud video editing) aligns with required credential (NEMO_TOKEN) and the SKILL.md which sends uploads and editing commands to a remote nemovideo API. Required binaries are none and requested endpoints match the editing use case.
ℹ
Instruction Scope
Instructions remain within the stated editing purpose (upload files, open session, send editing instructions, poll render status). They instruct generating an anonymous token if none is present and to avoid exposing tokens. However, SKILL.md metadata lists a config path (~/.config/nemovideo/) but the body does not describe how/if tokens or session IDs are persisted there — that's an inconsistency and missing detail about where secrets are stored or how uploads are retained.
✓
Install Mechanism
No install spec and no code files (instruction-only). This is low-risk from an installation perspective because nothing will be written to disk by an installer.
ℹ
Credentials
Only one credential is required (NEMO_TOKEN), which is appropriate for a third-party API. The SKILL.md does instruct obtaining an anonymous token via the service's API, which is coherent. Be aware that user media files are uploaded to mega-api-prod.nemovideo.ai — that is necessary for the feature but is a privacy consideration. The metadata/configPaths entry is not justified by the instructions and should be clarified.
✓
Persistence & Privilege
always:false and normal agent invocation are used. There is no install or modification of other skills or system-wide settings described. The only potential persistence is session tokens/saved creds — SKILL.md lacks detail on storage, so check before allowing long-lived token storage.
Assessment
This skill appears to do what it says: it uploads your recordings to a remote service (mega-api-prod.nemovideo.ai) for cloud GPU editing and requires a NEMO_TOKEN. Before installing or using it: (1) Confirm you are comfortable uploading the files (they leave your device and are processed by the remote service). (2) Ask the skill owner how/where tokens and session IDs are stored (metadata references ~/.config/nemovideo/ but SKILL.md does not explain persistence). (3) Prefer using an anonymous token for one-off jobs if you do not want a long-lived credential tied to your account; check how to revoke or rotate tokens and what the service retention/delete policy is. (4) Do not provide unrelated secrets or credentials. (5) If you need stronger guarantees, test with non-sensitive sample recordings and review the provider's privacy/security documentation before sending real content.

Like a lobster shell, security has layers — review code before you run it.

latestvk974c0dddca14kt4f6qmzzqzwx84kx41

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments