Video Editor Kling Ai
v1.0.0Turn a 30-second product clip or five product images into 1080p AI-generated MP4 videos just by typing what you need. Whether it's generating cinematic video...
⭐ 0· 51·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (AI video generation) match the runtime instructions: calls to a remote Nemovideo API, upload endpoints, SSE for generation, and render/export endpoints. One small incoherence: the registry metadata lists NEMO_TOKEN as a required environment variable, but the SKILL.md provides an anonymous-token fallback flow if NEMO_TOKEN is absent, so treating NEMO_TOKEN as strictly required is inaccurate.
Instruction Scope
SKILL.md instructs only what is needed for remote video generation: create/refresh a session, upload user media, send SSE messages, poll render state, and handle error codes. It instructs reading the skill's YAML frontmatter (to populate attribution headers) and detecting install path for a platform header — both relate only to attribution and not to unrelated system secrets or files. No instructions are present to read unrelated system files, credentials, or to exfiltrate data to unexpected endpoints.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so there is no on-disk installation or archive download to evaluate. That is the lowest-risk install surface.
Credentials
The only declared credential is NEMO_TOKEN (primaryEnv), which is appropriate for an API-backed video service. The SKILL.md also references a config path (~/.config/nemovideo/) and reading the skill's frontmatter/install path for attribution headers — these are reasonable but should be documented to the user. The small mismatch is that NEMO_TOKEN is listed as required though the instructions implement an anonymous-token fallback; this should be clarified in metadata.
Persistence & Privilege
The skill does not require 'always' presence and does not request system-wide modifications. It may be invoked autonomously by agents (default), which is normal for skills; there is no evidence it modifies other skills or system configurations.
Assessment
This skill appears to be a straightforward client for a remote video-rendering API (mega-api-prod.nemovideo.ai). Before installing or enabling it: 1) Only provide NEMO_TOKEN if you trust that service — otherwise the skill will request an anonymous token by contacting their API automatically. 2) The skill will upload whatever media you give it to the remote service for rendering; do not upload sensitive videos you don't want hosted off-site. 3) The skill reads its own frontmatter and may check common install paths to populate attribution headers — this is harmless but you can review the SKILL.md yourself. 4) If you need stronger guarantees, ask the vendor for privacy/retention and export policies for uploaded media. Overall the pieces align with the stated purpose, but clarify whether NEMO_TOKEN is truly required or optional before providing long-lived credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk97bedzg5as8jkrfytn0n2phs184swmh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN