ClawHub

Subtitle Video Tiktok

v1.0.0

add TikTok video clips into captioned TikTok videos with this skill. Works with MP4, MOV, WebM, AVI files up to 500MB. TikTok creators use it for adding subt...

⭐ 0· 20·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (add captions to TikTok videos) lines up with the declared requirement (NEMO_TOKEN) and the SKILL.md which describes uploading videos, creating sessions, and rendering on a remote API. The metadata's configPaths (~/.config/nemovideo/) is plausible for storing tokens but is not referenced elsewhere in the instructions (minor inconsistency).
ℹ
Instruction Scope
Instructions stay within the stated purpose (file upload, session creation, SSE streaming, render/export flows). They instruct generating an anonymous token via a network call and saving a session_id; they do not instruct reading unrelated system files. Small ambiguities: where to persist session_id/token is unspecified; header X-Skill-Platform is derived from an install path that may not exist in all hosts. These are design/implementation gaps rather than clear overreach.
✓
Install Mechanism
No install spec and no code files — the skill is instruction-only, so there is no package download or archive extraction risk.
ℹ
Credentials
Only one credential (NEMO_TOKEN) is required, which is proportionate for an API-backed video processing service. Metadata also lists a config path (~/.config/nemovideo/); that could be reasonable but is not used explicitly in the SKILL.md, so it's a minor unexplained item.
✓
Persistence & Privilege
always is false and the skill does not request permanent system-level privileges or other skills' configuration. It does instruct the agent to keep session state for ongoing renders, which is normal for this type of service.
Assessment
This skill appears to do what it says: upload video clips to a third-party rendering service and return captioned MP4s. Before installing, consider: (1) The skill talks to https://mega-api-prod.nemovideo.ai but the package has no homepage or known publisher — verify the service separately if you need strong provenance. (2) Create a compartmentalized/limited token or use anonymous tokens for non-sensitive content rather than exposing any high-privilege account credentials. (3) Be mindful of privacy: any video you upload goes to the remote service. (4) The SKILL.md has a couple of minor ambiguities (where session data is stored, how X-Skill-Platform is detected); if you plan to rely on this skill in production, ask the author to clarify storage behavior and token lifecycle. If you want higher assurance, request a homepage, publisher identity, or source code for review.

Like a lobster shell, security has layers — review code before you run it.

latestvk9753pj09kmwrcfr5dj6wa23qn84mf13

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📱 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments