Subtitle Generator Google Extension
v1.0.0Turn a 3-minute YouTube tutorial video into 1080p captioned video files just by typing what you need. Whether it's adding auto-generated subtitles to videos...
⭐ 0· 27·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description describe a cloud-based subtitle/video export service and the SKILL.md instructs contacting a remote rendering API, uploading videos, creating sessions, and exporting MP4s — all expected for this purpose. Requesting a single service token (NEMO_TOKEN) is proportionate.
Instruction Scope
Instructions focus on API interactions (auth, session creation, upload, SSE, render). They also ask the agent to read this file's YAML frontmatter for skill attribution and to detect an install path to set X-Skill-Platform — these require reading local metadata/paths but are related to attribution. The skill will upload user video files to an external third-party endpoint (mega-api-prod.nemovideo.ai); users should be aware of privacy/PII implications.
Install Mechanism
No install spec and no code files — instruction-only skill. This minimizes on-disk installation risk.
Credentials
The skill declares NEMO_TOKEN as the primary/only required environment variable, which matches usage in the instructions. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata provided earlier lists no required config paths — this is a metadata mismatch to clarify but not necessarily malicious.
Persistence & Privilege
always is false and the skill does not request system-wide persistence or modify other skills' configs. The agent will create ephemeral sessions/tokens with the service as part of normal operation.
Scan Findings in Context
[no_regex_findings] expected: The static regex scanner found nothing to analyze because this is an instruction-only skill with no code files. That is expected; absence of findings is not proof of safety — the runtime behavior is defined by the SKILL.md.
Assessment
This skill will upload your video files and related metadata to a third-party backend (mega-api-prod.nemovideo.ai) and requires a NEMO_TOKEN (or it will obtain an anonymous starter token). Before installing or using it: (1) confirm you're comfortable uploading any videos you provide (privacy, copyrighted content, or PII may be exposed); (2) only supply a NEMO_TOKEN with the minimal scope needed and be prepared to rotate/revoke it if needed; (3) note a small metadata inconsistency (SKILL.md frontmatter references ~/.config/nemovideo/ while registry metadata did not) — ask the publisher to clarify why the skill might read that path; (4) because there is no homepage or publisher information, prefer to use anonymous tokens or test with non-sensitive files first and seek more publisher/source information before trusting it with confidential media.Like a lobster shell, security has layers — review code before you run it.
latestvk9750vtx5e4sshh1e5xn82b2fx84w0ya
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN