ClawHub

Portugues Editor Ai

v1.0.0

Cloud-based portugues-editor-ai tool that handles editing videos with Portuguese subtitles and captions. Upload MP4, MOV, AVI, WebM files (up to 500MB), desc...

⭐ 0· 56·0 current·0 all-time
by@susan4731-wilfordf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the requested environment variable (NEMO_TOKEN) and the documented remote API (nemovideo.ai). Declared config path (~/.config/nemovideo/) and primaryEnv are coherent for a client that stores service config/tokens. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
SKILL.md contains detailed runtime instructions to obtain (or reuse) a NEMO_TOKEN, create sessions, upload files, stream SSE, and poll export status. This is expected for a cloud video-editing skill. Important behavioral notes: it will send user-supplied video files to an external API (mega-api-prod.nemovideo.ai), generate and store a session_id at runtime, and probes local install paths (~/.clawhub, ~/.cursor/skills/) to set an X-Skill-Platform header. These actions are consistent with the described purpose but have privacy implications (uploads to remote service) and require the agent to access user-supplied file paths.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is written to disk by an installer. This is the lowest-risk install model.
✓
Credentials
Only a single service credential (NEMO_TOKEN) is required and is clearly the primary credential used for API calls. No additional unrelated secrets or broad config paths are requested.
✓
Persistence & Privilege
always is false and the skill does not request elevated or permanent platform-wide privileges. The SKILL.md asks to 'save session_id' for the session lifetime (expected). The skill does probe local install paths for attribution headers but does not request to modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: it will upload videos and related edit instructions to the Nemovideo API and requires a NEMO_TOKEN (which can be obtained anonymously via the API). Before installing, consider: 1) privacy — any video you upload will be sent to mega-api-prod.nemovideo.ai; avoid uploading sensitive or private content unless you trust the service and its policies; 2) token handling — NEMO_TOKEN grants the skill access to your rendering/session operations, so treat it like a credential and rotate/revoke if needed; 3) local access — the skill will read user-supplied file paths for uploads and probe common skill install paths only to set headers; ensure you’re comfortable with that file access; 4) verify the service domain and review its terms/privacy if you plan to use it for confidential material. There are no strong red flags in the skill metadata or instructions, but these privacy considerations are important.

Like a lobster shell, security has layers — review code before you run it.

latestvk972t9hv8rb0z1wpfg71qe119n84jrpx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🇧🇷 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments