Video Editing Software Free
v1.0.0Get edited MP4 clips ready to post, without touching a single slider. Upload your raw video clips (MP4, MOV, AVI, WebM, up to 500MB), say something like "tri...
⭐ 0· 50·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (cloud video editing) match the declared runtime actions: uploading video files, starting render jobs, polling state, and downloading results. Requiring a single service token (NEMO_TOKEN) is appropriate for a hosted API.
Instruction Scope
SKILL.md gives concrete API endpoints and step-by-step behavior (auth, create session, upload, SSE handling). It instructs the agent to read this file's frontmatter and detect install path to set X-Skill-Platform — reading those local paths/frontmatter is reasonable for header attribution but is a point to be aware of because it requires filesystem inspection. The instructions do not request unrelated system credentials or file reads.
Install Mechanism
No install spec or additional binaries are requested (instruction-only), so nothing is written to disk by an installer. This is the lowest-risk install posture.
Credentials
Only NEMO_TOKEN is declared as required (primary credential), which fits a single-hosted cloud API. Minor inconsistency: the SKILL.md frontmatter lists a configPath (~/.config/nemovideo/) while the registry metadata shown earlier lists no config paths — this mismatch should be clarified. Otherwise no unrelated secrets or multiple credentials are requested.
Persistence & Privilege
The skill is not always-enabled and uses default autonomous invocation settings. It suggests saving a session_id for job tracking (normal). It does not request system-wide or other-skills configuration changes.
Assessment
This skill appears to do what it says: it uploads user video files to a cloud API (mega-api-prod.nemovideo.ai) for processing using a single token (NEMO_TOKEN). Before installing or using it: 1) Verify you trust the service/domain (no homepage or publisher info was provided). 2) Prefer using the anonymous token flow for non-sensitive content instead of providing a long-lived token. 3) Understand uploaded videos will be sent off-host — avoid uploading private/confidential footage unless you confirm the provider's privacy policy. 4) Note a small metadata mismatch (SKILL.md mentions ~/.config/nemovideo/ while registry metadata did not) — ask the publisher to clarify. 5) If you must supply a NEMO_TOKEN from elsewhere, restrict its scope/expiration and store it securely. If you want higher assurance, request the skill publisher’s source, homepage, and privacy/security documentation.Like a lobster shell, security has layers — review code before you run it.
latestvk972y0yd0319whhnkzcam98yx184qac0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN