Video Cutter Online
v1.0.0trim video clips into trimmed video clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators use it for cutting unwanted sec...
⭐ 0· 26·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to trim videos using a cloud backend and only requests a single service token (NEMO_TOKEN) which is coherent for a hosted video-processing API. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata earlier reported no required config paths.
Instruction Scope
The instructions describe creating or using a NEMO_TOKEN, uploading video files, opening SSE streams, polling render status, and mapping GUI actions to API calls — all expected for this use case. They also instruct the agent to read the skill file's YAML frontmatter for attribution and to detect install paths (e.g., ~/.clawhub/, ~/.cursor/skills/) which requires reading some local paths; this is plausible but broader filesystem probing than strictly necessary for processing uploads.
Install Mechanism
No install spec or bundled code is present (instruction-only skill), so nothing is written to disk by an installer. This is the lowest install risk.
Credentials
Only NEMO_TOKEN is declared as the primary credential, which is proportional for a cloud video service. One mismatch: the registry lists NEMO_TOKEN as required, but the runtime instructions provide a clear anonymous-token fallback when NEMO_TOKEN is absent (so the token is not strictly required). No unrelated credentials are requested.
Persistence & Privilege
always:false and no install hooks are present. The skill does not request persistent system privileges or to modify other skills. It will, however, initiate remote jobs that may continue on the service if you close the client (server-side orphaning), which is normal for remote render services.
Assessment
This skill appears to do what it says: upload your videos to a cloud service and return trimmed exports. Before installing or using it, consider: (1) it will send your video files to https://mega-api-prod.nemovideo.ai for processing — verify you trust that domain/owner and do not upload sensitive content you would not want transmitted off your machine; (2) the registry metadata and SKILL.md disagree slightly (config path listed in the skill but not the registry; NEMO_TOKEN is marked required yet the skill can obtain an anonymous token), which suggests the publisher may have edited the skill text without updating registry fields — not necessarily malicious but worth noting; (3) there is no homepage or known source/owner reputation — prefer services with documented privacy and ownership if you process private or commercial footage; (4) because it is instruction-only and requires no local install, local risk is low, but the main risk is data exposure to the remote API. If you proceed, test with non-sensitive sample videos first and confirm how long uploaded files and render outputs are retained by the service.Like a lobster shell, security has layers — review code before you run it.
latestvk97f32bdjc41stzv8177zm6jnn852tc7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✂️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN