ClawHub

Video Editor Pro

v1.0.0

Cloud-based video-editor-pro tool that handles trimming and enhancing raw footage into publish-ready videos. Upload MP4, MOV, AVI, WebM files (up to 500MB),...

⭐ 0· 19·0 current·0 all-time
by@roca-677
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name and description (cloud video editing, upload files, remote rendering) align with the runtime instructions that POST video files and render jobs to mega-api-prod.nemovideo.ai and require a NEMO_TOKEN. The required credential (NEMO_TOKEN) is appropriate for a cloud service API.
ℹ
Instruction Scope
Instructions explicitly tell the agent to upload user video files to an external service, manage session tokens, poll render status, and stream SSE events — all expected for a cloud editor. Be aware the skill directs the agent to issue Authorization and attribution headers on every request and to read the skill's own YAML frontmatter and (optionally) detect install path for attribution; these actions are within scope but involve reading agent environment/install paths and sending data to an external domain.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or written by an installer. This is the lowest-risk install footprint.
ℹ
Credentials
Only a single API credential (NEMO_TOKEN) is required, which matches the declared primaryEnv. Minor inconsistency: the SKILL.md frontmatter includes metadata.requires.configPaths (["~/.config/nemovideo/"]) even though the registry metadata lists no required config paths — this mismatch should be clarified. The skill also instructs generating an anonymous token and treating it as NEMO_TOKEN (which implies writing or persisting a token), so confirm how/where that token will be stored.
✓
Persistence & Privilege
always:false and normal autonomous invocation. The skill asks to save ephemeral session_id and potentially set NEMO_TOKEN if generated, but it does not request system-wide privileges or modify other skills. No forced always-on behavior detected.
Assessment
This skill appears to do what it says: it uploads your video files to an external rendering service and requires one API token (NEMO_TOKEN). Before installing or using it: (1) Verify you trust the domain (mega-api-prod.nemovideo.ai) and the skill owner — there is no homepage or source listed. (2) Do not upload sensitive or confidential footage unless you understand the service's privacy/retention policy. (3) Confirm how the anonymous token or NEMO_TOKEN will be stored (environment variable vs disk) and that you are comfortable with that storage. (4) Note the frontmatter mentions a config path (~/.config/nemovideo/) — ask the author whether the skill will read or write that directory. (5) Prefer using a short-lived anonymous token if you don't want to bind a personal account. If you need more assurance, ask the publisher for documentation, a privacy policy, or a source repository before proceeding.

Like a lobster shell, security has layers — review code before you run it.

latestvk970h72tz65xk32x71ttcasr0n84k02h

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments