ClawHub

Sports Highlight Maker

v1.0.5

Sports Highlight Maker — Create Game Highlights and Recap Videos from Sports Footage. The final buzzer sounded twenty minutes ago. Parents are already aski...

⭐ 0· 96·0 current·0 all-time
bypeandrover adam@peand-rover
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (video highlight editing) match the declared primary credential (NEMO_TOKEN), the documented API domain (mega-api-prod.nemovideo.ai), and the stated config path (~/.config/nemovideo/). Requiring a token and a persistent client_id fits the stated purpose.
✓
Instruction Scope
SKILL.md instructs the agent to: greet the user, read/write ~/.config/nemovideo/client_id, request an anonymous token from the declared API, and call the service to upload/edit/render videos. It does not instruct arbitrary file system scans or require unrelated credentials. Reading and persisting client_id is within the declared scope.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. That minimizes disk-write/installation risk; runtime network calls go to the service's API domain specified in the skill.
✓
Credentials
Only NEMO_TOKEN is required (primaryEnv). The SKILL.md documents a few optional env vars (API/WEB URLs, client id) used to configure requests. These are reasonable for a hosted video-editing API and are proportional to the functionality.
✓
Persistence & Privilege
always:false (default) and disable-model-invocation:false. The skill will not be force-included globally. It does persist a client_id to ~/.config/nemovideo/, which is reasonable for client identification; no other elevated persistence or cross-skill configuration changes are requested.
Assessment
This skill appears to be a straightforward integration with Nemovideo: it will make network calls to https://mega-api-prod.nemovideo.ai and may store a generated client_id in ~/.config/nemovideo/client_id. Before installing, confirm you trust nemovideo.com and their API (review their privacy policy and terms), and be aware you'll be uploading video files (which may contain personal data). If you have your own NEMO_TOKEN (paid account) set it in env to avoid the anonymous-token flow; otherwise the skill will request an anonymous token and use it for the session (100 free credits, expires in 7 days). Note this skill is instruction-only (no code to audit here), so its runtime behavior is entirely determined by the SKILL.md — if you want stronger assurance, review Nemovideo's public repository or privacy documentation referenced in the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk970zpkhcp9js57nppqhrctrdd83xwyb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

⚽ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments