Video Editor Ai With Music
v1.0.0edit video clips into music-synced videos with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. content creators use it for adding AI-matched ba...
⭐ 0· 53·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to edit videos with AI-matched music and only requests a single service credential (NEMO_TOKEN). That is consistent with a cloud rendering backend. One minor mismatch: the SKILL.md frontmatter lists a configPaths entry (~/.config/nemovideo/) while the registry metadata provided earlier indicated no required config paths — this is a documentation inconsistency but does not by itself indicate unrelated capability requests.
Instruction Scope
Runtime instructions stay within the expected scope: create/use a session, upload video files, stream SSE messages, and poll for render results. The skill instructs anonymous-token acquisition if NEMO_TOKEN is missing, and instructs multipart uploads of local files or URLs. These are expected for a cloud video service, but note that uploading local video files will transmit user data to the external API (mega-api-prod.nemovideo.ai). The SKILL.md also requires adding attribution headers and suggests autodetecting install path to set X-Skill-Platform — that implies the agent may inspect its environment/install path to form a header.
Install Mechanism
No install spec and no code files — instruction-only skill. This is a low-risk distribution model because nothing is written to disk by an installer. The skill will make outbound HTTPS calls at runtime as described.
Credentials
Only one credential is declared (NEMO_TOKEN / primaryEnv). The SKILL.md explains how to obtain an anonymous token if none is present. There are no extra unrelated secrets requested. The only sensitive behavior is transmission of user video files to the remote service, which is expected for the stated purpose but worth user consideration.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges. It instructs keeping session_id in memory for the session duration, which is normal. Autonomous invocation is allowed (platform default) but not combined with other concerning factors.
Assessment
This skill appears to do what it says: it sends your uploaded video to a nemo-video cloud service, creates or uses a NEMO_TOKEN, and returns rendered MP4s. Before installing, consider: (1) You will be uploading potentially sensitive video/audio to https://mega-api-prod.nemovideo.ai — confirm you trust that endpoint and review its privacy/terms. (2) The skill can obtain an anonymous NEMO_TOKEN on your behalf (network call) if you don't provide one; check whether you want an anonymous token tied to your environment. (3) There is a small metadata inconsistency (a config path is present in the SKILL.md frontmatter but not in the registry metadata) — ask the publisher which config path, if any, the skill will read or write. (4) No local installer is provided, but the agent will need permission to read any local files you ask it to upload. If any of those behaviors are unacceptable, do not install or invoke the skill until you have more details from the publisher.Like a lobster shell, security has layers — review code before you run it.
latestvk970bxcp1ffh4wv7gw41swg1r984rjpf
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN