Video Editing With Japanese
v1.0.0add video clips into Japanese-captioned videos with this video-editing-with-japanese skill. Works with MP4, MOV, AVI, WebM files up to 500MB. YouTubers and c...
⭐ 0· 62·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description, declared primary credential (NEMO_TOKEN), and the documented API endpoints all align with a cloud video-processing service that adds Japanese subtitles and exports MP4s. The single required env var (NEMO_TOKEN) is appropriate for authenticating to the external API the skill uses.
Instruction Scope
SKILL.md instructs the agent to: obtain or use NEMO_TOKEN, create sessions, upload user video files, stream SSE interactions, poll render status, and include attribution headers. Those actions are expected. Two points to note: (1) it asks the agent to detect the install path (e.g., ~/.clawhub/) and read this file's frontmatter for attribution headers — that requires inspecting local skill metadata and may reveal environment details; (2) the frontmatter also references a config path (~/.config/nemovideo/) which is not present in the registry metadata — the skill doesn't explicitly instruct reading that path, but the presence of that configPath in its metadata suggests it may assume access to user config. Both are out-of-band privacy considerations rather than explicit malicious behavior.
Install Mechanism
No install steps or external code are provided (instruction-only skill). Nothing will be downloaded or written by an installer as part of skill installation.
Credentials
The skill requests exactly one credential (NEMO_TOKEN), which is proportional to a service that needs authenticated API calls. However, NEMO_TOKEN is sensitive (it will be sent as Bearer token for uploads/exports). The SKILL.md also suggests creating an anonymous token via the API if none is present (ephemeral token), which mitigates risk if you prefer not to supply a long-lived token. The metadata's config path (~/.config/nemovideo/) is a potential extra access vector if the agent actually reads it; the registry listing did not declare this path, which is an inconsistency to clarify.
Persistence & Privilege
The skill is not always-enabled and does not request elevated system privileges. It will perform autonomous network operations when invoked. SKILL.md implies storing a session_id and using/storing NEMO_TOKEN; it's unclear whether the skill expects to persist tokens to environment or only to keep them in-memory for the session. Confirm whether tokens are persisted and where they are stored.
Assessment
This skill appears to do what it says: it uploads your video to a third-party API (mega-api-prod.nemovideo.ai) and returns edited MP4s with Japanese subtitles. Before installing or using it: (1) understand that any video and its audio will be uploaded to the external service and processed on their cloud GPUs; (2) treat NEMO_TOKEN as sensitive—prefer short-lived/anonymous tokens or a service account token you can revoke; (3) ask the publisher to clarify whether the skill will read any local config (the frontmatter references ~/.config/nemovideo/) or persist tokens to disk; (4) confirm what metadata the skill includes in requests (it requests adding X-Skill-Platform based on install path which could leak local path info) and whether you’re comfortable with that; and (5) if you need stronger privacy, avoid using a personal account token and delete/revoke any tokens after use.Like a lobster shell, security has layers — review code before you run it.
latestvk9795hsdxw4j4k2s1v8cfh3npd84mp6m
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🇯🇵 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN