ClawHub

Youtube Video Maker Free

v1.0.0

Get a finished 1080p MP4 ready to upload to YouTube without paying for software. This free YouTube video maker handles the full creation process — script to...

⭐ 0· 50·0 current·0 all-time
by@susan4731-wilfordf
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill name and description (create 1080p MP4s for YouTube) align with the runtime instructions and required credential (NEMO_TOKEN). All API calls and upload/ render workflows described are coherent with a cloud video-generator service.
ℹ
Instruction Scope
Instructions tell the agent to generate/refresh an anonymous NEMO_TOKEN, create and reuse a session_id, upload user media, poll renders, and download the final MP4. These actions are expected for a rendering service, but they do mean user scripts, audio/video files, and associated metadata will be transmitted to https://mega-api-prod.nemovideo.ai. The SKILL.md also instructs detecting install paths to set an X-Skill-Platform header (requires checking filesystem paths) — benign for telemetry but worth noting for privacy.
✓
Install Mechanism
No install spec and no code files — instruction-only skill. This is lower risk because nothing is downloaded or written by an install step.
ℹ
Credentials
Only a single credential (NEMO_TOKEN) is required and declared as the primary credential, which matches the API usage in the instructions. Metadata also lists a config path (~/.config/nemovideo/) which is plausible but not referenced heavily in the SKILL.md — minor mismatch but not automatically malicious.
✓
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence; it neither modifies other skills nor asks for system-wide privileges. Autonomous invocation is allowed (default) but not unusual.
Assessment
This skill will send your script and any uploaded media to a third-party backend (mega-api-prod.nemovideo.ai) and will automatically create and use an anonymous API token if you don't provide one. If you care about privacy or sensitive content, do not upload private data. Consider creating and supplying your own NEMO_TOKEN (so you control lifecycle/revocation), verify the service's reputation and privacy policy before use, and revoke the token after testing if you have concerns. The skill is internally consistent for a cloud video renderer, but transmitting media to an unknown external service is the main risk you should evaluate.

Like a lobster shell, security has layers — review code before you run it.

latestvk971zxs46x502nd1dq39xpps9h84e0d3

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments