Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Online Course Creator Video — AI Video Maker for Course Creators, E-Learning Instructors, and Digital Educators
v1.0.0Students who used structured video walkthroughs in their coursework completed lessons 68% faster and rated their satisfaction 2.4x higher than students who r...
⭐ 0· 41·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The skill's name and README-style instructions clearly describe an AI video production service for course creators — that purpose aligns with an instruction-only skill that asks users to upload slides/recordings. However, the metadata references a primary credential (NEMO_TOKEN) and a config path (~/.config/nemovideo/) that imply an external service integration; the SKILL.md itself does not explain or justify those items. This is plausible (a hosted service could require a token) but the linkage is not explicit.
Instruction Scope
SKILL.md gives high-level prompts and asks users to upload assets but contains no concrete runtime instructions (no API endpoints, no mention of using NEMO_TOKEN or reading the config path). The instructions are open-ended — they give the agent broad discretion to select visual approaches and package outputs — which increases the chance the agent will perform unexpected network calls or read configs unless constrained. The skill does not state where uploads are sent or how credential/config data is used.
Install Mechanism
No install spec and no code files are present (instruction-only). This minimizes disk-write/execution risk — nothing is downloaded or installed by the skill itself.
Credentials
Registry metadata lists NEMO_TOKEN as the primary credential and a user config path (~/.config/nemovideo/), but requires.env is empty and SKILL.md never references or justifies those values. Requesting access to a local config path or an opaque token is potentially disproportionate for an instruction-only description unless the skill integrates with a named service; no service domain, homepage, or documentation is provided to validate that need.
Persistence & Privilege
The skill does not request always:true and there is no install behavior that would persist or modify other skills or system-wide settings. It appears not to request permanent presence or elevated platform privileges.
What to consider before installing
This skill appears to be an instruction-only wrapper for an AI video service, but the package metadata mentions a NEMO_TOKEN and a local config path without showing how they are used. Before installing or using it: (1) ask the publisher for a source repository or official docs and a clear explanation of what NEMO_TOKEN is and why the skill needs it; (2) avoid supplying high-privilege or unrelated credentials — only provide a token scoped to the video service; (3) do not grant access to your home config directories unless you trust the provider and have reviewed code; (4) prefer using a dedicated, revocable API key for the service and test in a sandbox environment; (5) if you cannot verify the vendor or see implementation details, treat the skill as higher risk and consider not installing it.Like a lobster shell, security has layers — review code before you run it.
latestvk9717eygm39xxqsjjhyj1ch3yd83wvrn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎓 Clawdis
Primary envNEMO_TOKEN