Caption Generator Downfall
v1.0.0Get clean captionless videos ready to post, without touching a single slider. Upload your video clips (MP4, MOV, AVI, WebM, up to 500MB), say something like...
⭐ 0· 43·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is described as a cloud caption-removal tool and its instructions call nemo-video endpoints and require a NEMO_TOKEN — this is coherent. However, the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) while the registry metadata showed none; that mismatch is unexplained but not obviously malicious.
Instruction Scope
Runtime instructions stay within the expected scope (connect to the nemo API, create a session, upload video files, poll export). The skill provides a fallback anonymous-token flow if NEMO_TOKEN is absent. It also asks to include attribution headers derived from an install path (e.g., ~/.clawhub/) which implies reading/detecting install context; the SKILL.md does not instruct reading unrelated system files, but the install-path header derivation is a small scope expansion worth noting.
Install Mechanism
Instruction-only skill with no install spec and no code files. No binaries or downloads are requested, which minimizes install-time risk.
Credentials
Only one credential (NEMO_TOKEN) is declared as required, which is reasonable for a cloud API. The instructions also allow obtaining an anonymous temporary token. Still, NEMO_TOKEN grants access to upload and render operations and possibly credits, so using a primary account token without checking provider policies is a privacy/credential risk. Also note the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) that isn't reflected elsewhere.
Persistence & Privilege
The skill is not force-included (always:false) and does not request elevated system persistence. It uses standard session tokens for server-side jobs; no instructions to modify other skills or system-wide configuration were found.
Assessment
This skill appears to do what it says: it uploads videos to nemovideo.ai, edits/removes captions on cloud GPUs, and returns a downloadable MP4, and it only needs a NEMO_TOKEN. Before installing, verify you trust the nemo service (uploads contain your media), avoid supplying a primary or highly-privileged account token — use a throwaway or anonymous token to test, and review the provider's privacy and retention policies. Note the small inconsistencies: SKILL.md frontmatter references a config path (~/.config/nemovideo/) and install-path-derived attribution headers; ask the publisher to clarify why those are needed if you’re uncomfortable. If you want higher assurance, request source/origin information (homepage or repository) and a privacy/data-retention policy from the skill author before using with sensitive content.Like a lobster shell, security has layers — review code before you run it.
latestvk973hex7w48y0n2fy110eq98cd84sd3z
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🚫 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN