Video Trimmer Github
v1.0.0trim video clips into trimmed video clips with this skill. Works with MP4, MOV, AVI, WebM files up to 500MB. developers and content creators use it for cutti...
⭐ 0· 55·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to trim videos and its instructions solely describe contacting a remote rendering API, uploading files, creating sessions, and exporting results. Requesting a single service token (NEMO_TOKEN) is consistent with this purpose.
Instruction Scope
SKILL.md instructs the agent to obtain or use a NEMO_TOKEN, create sessions, upload files, and handle SSE streams — all expected for a cloud video trimming workflow. It does not instruct reading arbitrary system files or unrelated environment variables. Note: the frontmatter references a config path (~/.config/nemovideo/) that suggests the agent might look for on-disk config; the registry listing did not declare required config paths, which is an inconsistency to verify.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing is written to disk by an installer. This is the lowest install risk.
Credentials
Only NEMO_TOKEN is required as the primary credential, which aligns with the described API usage. However, the frontmatter's mention of a config path (~/.config/nemovideo/) could imply the skill expects on-disk credentials/config; confirm whether the skill will read that directory before installing or providing a token.
Persistence & Privilege
The skill is not marked always:true and uses the platform default (agent-invocable). It does not request system-wide persistence or privileges beyond storing session IDs/tokens needed for API calls.
Assessment
This skill appears to do what it says: contact a remote video-rendering API, upload videos, and return exports. Before installing: (1) verify the service domain (mega-api-prod.nemovideo.ai) and confirm you trust it; (2) note that NEMO_TOKEN grants access to your render jobs — treat it like a credential and avoid using high-privilege keys; (3) ask the publisher whether the skill will read ~/.config/nemovideo/ (frontmatter mentions it but the registry metadata did not); (4) prefer generating a limited anonymous token (as described) rather than pasting long-lived secrets; and (5) if you need higher assurance, request the skill source or a known homepage instead of an unknown source before use.Like a lobster shell, security has layers — review code before you run it.
latestvk978ebc4n07xz8hkhzfd2wsxfn84q4a2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
✂️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN