ClawHub
Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Darlink Ai

v1.0.4

Darlink-ai brings a new dimension to video editing by letting you direct changes through natural conversation rather than complex timelines. Trim dead air, r...

⭐ 0· 79·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (conversational video editing) aligns with the declared need for a NEMO_TOKEN and calls to mega-api-prod.nemovideo.ai; requesting a service API token is appropriate for a cloud editing workflow.
ℹ
Instruction Scope
SKILL.md instructs the agent to read/write ~/.config/nemovideo/client_id, to acquire or use NEMO_TOKEN, and to upload/process video via the nemovideo API. These actions are within the expected scope, but they do mean user video and metadata will be transmitted to the external nemovideo service.
✓
Install Mechanism
No install spec or code files — instruction-only skill (lowest install risk). Nothing is downloaded or written by an installer beyond the described config file write in the instructions.
✓
Credentials
Only NEMO_TOKEN is required (primary credential). Other environment variables mentioned are optional and documented. The only config path written is ~/.config/nemovideo/client_id (a non-secret UUID). No unrelated secrets or system credentials are requested.
✓
Persistence & Privilege
The skill is not forced-always. It persists a client_id to ~/.config/nemovideo/ to avoid rate limits (limited, explained persistence) and stores session tokens in memory for the session. It does not request elevated system privileges or modify other skills.
Assessment
This skill appears to be what it says: a cloud-based conversational video editor that will upload your videos to nemovideo's API and uses a NEMO_TOKEN (or obtains an anonymous token) to operate. Before installing, confirm you trust nemovideo.com and are comfortable with your media being uploaded to their servers; review their privacy/terms and the anonymous-token behavior (100 free credits, token expires in 7 days). If you prefer not to allow automatic token issuance, set your own NEMO_TOKEN or avoid using the skill. Note the skill will persist a non-secret client_id at ~/.config/nemovideo/client_id; revoke tokens from your nemovideo account if you stop using the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk975gc4q8g9qkqxrrqy5sw8rmh83qgtx

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments