Maker Free
v1.0.0Get finished video files ready to post, without touching a single slider. Upload your raw video clips (MP4, MOV, AVI, WebM, up to 500MB), say something like...
⭐ 0· 59·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (cloud video creation) match the declared requirement (NEMO_TOKEN) and the instructions (upload clips, create sessions, render/export via nemovideo API). No unrelated cloud credentials or binaries are requested.
Instruction Scope
Instructions focus on initiating sessions, uploading video files, and exporting renders via an external API. They instruct generating an anonymous token if NEMO_TOKEN is absent and to keep token values hidden from the user. The only minor scope issue: the skill references detecting the install path and a config path (~/.config/nemovideo/) in its frontmatter — reading install/config locations is plausible for platform attribution but should be confirmed (the registry metadata earlier listed no required config paths). Otherwise the runtime steps stay within the stated video-processing purpose and do not ask to read unrelated system files or secrets.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is low-risk: nothing is downloaded or written to disk by an installer step.
Credentials
The skill requires a single service credential (NEMO_TOKEN) which is proportional to a cloud API client. It also documents an anonymous-token flow to obtain a short-lived token if none is provided. No unrelated environment variables (AWS, GitHub, etc.) are requested. Note the small inconsistency where the frontmatter mentions a config path (~/.config/nemovideo/) while the registry metadata lists no required config paths.
Persistence & Privilege
Skill is not always-enabled and is user-invocable; it does not request elevated or cross-skill privileges. It instructs storing a session_id/token for subsequent API calls (normal for a service client).
Scan Findings in Context
[NO_CODE_TO_SCAN] expected: The scanner found no code files (instruction-only SKILL.md). This is expected for a pure-instructions skill; absence of code means static regex checks produced no findings but runtime behavior is fully specified in SKILL.md.
Assessment
This skill appears coherent with its stated purpose, but before installing consider: 1) The skill will contact mega-api-prod.nemovideo.ai and upload any videos you provide — do not upload sensitive content unless you trust that service and have checked its privacy/retention policy. 2) It stores and uses a NEMO_TOKEN (you can provide your own token or let the skill obtain an anonymous short-lived token); be aware the skill instructs hiding token values from the UI. 3) Confirm the minor metadata mismatch: the frontmatter references ~/.config/nemovideo/ and install-path detection for attribution — ask the publisher whether the skill will read or write any files in that path and where session tokens are persisted. 4) Because this is an instruction-only skill, its entire behavior is in the SKILL.md — if you need further assurance, request the publisher's homepage or privacy policy and test with non-sensitive sample clips first.Like a lobster shell, security has layers — review code before you run it.
latestvk973wekxvpstdr8wj6vj970t4s84nwpm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN