ClawHub

Highlight Editor Photo

v1.0.0

Skip the learning curve of professional editing software. Describe what you want — turn these photos into a highlight reel with music and transitions — and g...

⭐ 0· 45·0 current·0 all-time
by@tk8544-b
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The skill name/description (photo → highlight video) aligns with requiring a NEMO_TOKEN to call the nemovideo.ai APIs. Minor inconsistency: the registry metadata shown to you listed no required config paths, but the SKILL.md frontmatter (metadata) declares a configPaths entry (~/.config/nemovideo/). This is a small mismatch in metadata but does not change the core purpose.
ℹ
Instruction Scope
SKILL.md instructs the agent to: use NEMO_TOKEN or obtain an anonymous token, create sessions, upload files, use SSE for streaming responses, poll render status, and return download URLs. Those actions are appropriate for a remote render service. The skill also instructs reading its own YAML frontmatter and checking the agent's install path to set X-Skill-Platform attribution headers — this requires the agent to inspect local filesystem paths (e.g., ~/.clawhub/, ~/.cursor/skills/) which is not strictly necessary for video rendering but is intended for attribution. Expect the skill to transmit your uploaded images/videos and metadata to https://mega-api-prod.nemovideo.ai.
✓
Install Mechanism
There is no install spec and no code files — instruction-only. No files are downloaded or extracted by the skill itself, so installation risk is minimal.
✓
Credentials
The only required credential is NEMO_TOKEN (declared as primary), which matches the described API usage. The skill will also optionally mint an anonymous token if no token is present. It does not ask for unrelated secrets or other environment variables.
✓
Persistence & Privilege
always:false and no install-time persistence are set. The skill does not request to modify other skills or system-wide config; it only instructs creating remote sessions with the service.
Assessment
This skill appears to do what it claims: it will upload the photos you provide to nemovideo.ai and return rendered video URLs. Before installing or using it, consider: (1) Privacy: your images are sent to https://mega-api-prod.nemovideo.ai — check that service's privacy and retention policy if you care about sensitive content. (2) Credential choice: only provide a NEMO_TOKEN if you trust the service; otherwise the skill will obtain an anonymous token for you (which still uploads your files). (3) Local inspection: the skill may read its own frontmatter and probe typical install paths to set attribution headers — this can reveal limited environment/install information; if you prefer not to disclose that, avoid installing. (4) Metadata mismatch: the SKILL.md includes a configPaths entry while the registry metadata did not — this is likely a minor packaging inconsistency but worth noting. If you want stronger assurance, ask the skill author for a privacy/data-retention statement and for clarification about the configPath declaration.

Like a lobster shell, security has layers — review code before you run it.

latestvk971z9jtb5yczrzcz22nha45vs84sxjh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🖼️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments