Case Study Video
v1.0.3Case Study Video â Turn Customer Success Stories into Video Case Studies with AI. That Google Doc case study marketing wrote last quarter has been opened e...
⭐ 0· 80·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (video case-study editing) match the instructions: the SKILL.md describes uploading media, issuing editing/render requests to the nemovideo backend, and exporting rendered videos. The declared primary credential (NEMO_TOKEN) and config path (~/.config/nemovideo/) are consistent with a cloud service client.
Instruction Scope
Runtime instructions focus on setting up a client id, obtaining an anonymous or provided NEMO_TOKEN, creating sessions, uploading media, and using SSE to control edits — all expected for a conversational video-editing skill. The instructions do write/read only the skill's own config path and call the vendor API; they do not instruct reading unrelated system files or exfiltrating other credentials.
Install Mechanism
No install spec or code files are present; this is instruction-only. That minimizes disk writes and arbitrary code execution risk. Network calls are limited to the documented API endpoints.
Credentials
The registry lists no required env vars but declares NEMO_TOKEN as the primary credential; the SKILL.md also references optional envs (NEMO_API_URL, NEMO_WEB_URL, NEMO_CLIENT_ID, SKILL_SOURCE). This is reasonable for a client integration, but it means the skill will use and possibly create ~/.config/nemovideo/client_id and will obtain and use a token that grants backend access — treat that token as a secret.
Persistence & Privilege
always is false and the skill only persists its own client_id under ~/.config/nemovideo/. It does not request system-wide configuration changes or other skills' credentials. The skill can be invoked autonomously (platform default) but that is normal and not alone a red flag.
Assessment
This skill is an instruction-only client for the nemovideo service: it will (a) read or create ~/.config/nemovideo/client_id, (b) call the nemovideo API to obtain an anonymous token if you don't set NEMO_TOKEN, and (c) upload media to and request edits from the vendor API. Before installing, confirm you trust https://nemovideo.com and are comfortable with uploading your video/assets to their service. Treat NEMO_TOKEN like any API secret — don't provide production credentials for unrelated cloud accounts. If you need offline-only editing or want to avoid third-party uploads, do not use this skill. If you proceed, review nemovideo's privacy/terms to understand retention, sharing, and billing for uploaded media.Like a lobster shell, security has layers — review code before you run it.
latestvk97950e0fvnrkhgfyhdg3hgtmd83qr7e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
ð Clawdis
Primary envNEMO_TOKEN