Online Video Editor Ai
v1.0.0Tired of wrestling with complicated desktop software just to trim a clip or add a caption? online-video-editor-ai takes the friction out of video editing by...
⭐ 0· 33·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill is an online video editor that uses a remote processing API; requesting a single service token (NEMO_TOKEN) and describing endpoints is coherent with that purpose. No unrelated cloud providers or unrelated credentials are requested.
Instruction Scope
SKILL.md instructs the agent to use NEMO_TOKEN (or obtain an anonymous token via a POST) and to create sessions, send SSE messages, upload local files, and request renders from mega-api-prod.nemovideo.ai. These actions are appropriate for remote video processing. The file references (upload paths) imply the agent may access user-supplied files; the doc also asks the agent to detect its install path for an X-Skill-Platform header. There is no instruction to read unrelated system files or unrelated env vars.
Install Mechanism
No install spec or external downloads — the skill is instruction-only, which is the lowest install risk.
Credentials
Only NEMO_TOKEN is required, which is proportional for an API-based editor. However, the SKILL.md frontmatter lists a configPaths entry (~/.config/nemovideo/) while the registry metadata shows none — this inconsistency could mean the agent may access a local config directory if implemented. The skill also describes creating an anonymous token via a network call and using it as NEMO_TOKEN (reasonable, but consider where that token is stored).
Persistence & Privilege
always is false and disable-model-invocation is false (normal). The skill does not request elevated or persistent platform-wide privileges and does not attempt to modify other skills' configs.
Assessment
This skill looks like a straightforward wrapper around a cloud video-processing API and asks only for a single API token (NEMO_TOKEN). Before installing: 1) confirm you trust the external domain (mega-api-prod.nemovideo.ai) because the skill will send video files and metadata there; 2) avoid placing highly sensitive files or unrelated credentials in uploads; 3) note the SKILL.md can generate an anonymous token if no token is provided — understand where that token will be stored and rotate it after use if you are unsure; 4) the frontmatter mentions a local config path (~/.config/nemovideo/) but the registry shows none — ask the publisher how that path is used or whether the skill will read local config files; and 5) because the skill has no published source or homepage, prefer running it in a sandboxed environment or request additional provenance information from the skill publisher before granting access to private files or long-lived credentials.Like a lobster shell, security has layers — review code before you run it.
latestvk9704hr91zvnq5ac04jkjvz8nn842w4v
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN