ClawHub

Video Audio Converter

v1.0.0

Turn a 3-minute MP4 interview recording into 1080p converted audio files just by typing what you need. Whether it's extracting audio tracks from video files...

⭐ 0· 22·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The skill's name and description (video/audio conversion) match the resources it requests: a single service token (NEMO_TOKEN), a nemovideo API base URL, and an expected config path. No unrelated credentials or binaries are requested. (Minor wording nit: the README sometimes calls "audio files" and references "1080p"—1080p is a video resolution, not an audio property.)
ℹ
Instruction Scope
The SKILL.md instructs the agent to upload user video/audio files to https://mega-api-prod.nemovideo.ai, create or use a NEMO_TOKEN (including obtaining an anonymous token via an API call if none is present), create and persist a session_id for operations, and stream SSE results back to the user. It also instructs the agent to derive attribution headers and detect install path/platform (reading local paths like ~/.clawhub/ or ~/.cursor/skills/), which implies the agent may read some local paths and the skill frontmatter. These actions are coherent for a cloud conversion service but mean user media and metadata will be sent to the external nemovideo service.
✓
Install Mechanism
No install spec or code is included (instruction-only). Nothing is downloaded or written to disk by an installer step in the skill bundle itself.
✓
Credentials
Only one credential is declared: NEMO_TOKEN (primary). That token is appropriate for the described cloud API. The skill additionally supports creating an anonymous token via the service API if no token is present; no unrelated secrets are requested.
✓
Persistence & Privilege
The skill is not force-included (always:false) and does not request elevated system-wide privileges. It asks the agent to keep a session_id for the duration of operations and to read certain local paths to determine platform attribution; it does not instruct modifying other skills or agent-wide settings.
Assessment
This skill appears to do what it says: it uploads your videos to a nemovideo.ai backend and returns converted media. Before installing or using it, consider: (1) Privacy: any video/audio you upload will be sent to https://mega-api-prod.nemovideo.ai — don't upload sensitive personal or proprietary content unless you trust that service and have read its privacy/TOS. (2) Token behavior: if you don't provide NEMO_TOKEN the skill will request an anonymous token from the service (100 free credits, 7-day expiry) — that still enables the backend to associate uploads with a client id. (3) Local reads: the skill may read certain local paths or the skill frontmatter to build attribution headers; this is expected but be cautious if you have sensitive files in the referenced paths. (4) Network visibility: network calls to the external domain are required; if you must control data flow, provide your own NEMO_TOKEN and/or restrict outbound network access. If any of the above is unacceptable, do not install or avoid uploading private content. If you want higher assurance, ask the skill author for a privacy policy or run conversions on a vetted service or locally with trusted tooling.

Like a lobster shell, security has layers — review code before you run it.

latestvk9753ybx4jgkn7q7xqr10tkd0h84q5nx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments