ClawHub

Pixvideo Ai Video Maker

v1.0.4

pixvideo-ai-video-maker is a ClawHub AI skill that transforms raw footage and ideas into polished video content through natural language commands. Trim timel...

⭐ 0· 110·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill claims to transform and edit video via an external service and only requests a service token (NEMO_TOKEN) and a config path (~/.config/nemovideo/) which it uses to persist a client_id. These requirements are coherent with a cloud video-editing workflow.
ℹ
Instruction Scope
Instructions direct the agent to perform network calls (curl) to nemovideo API endpoints, upload user files, manage an anonymous token, and persist a client_id file. All of these are within the expected scope for a remote video-editing skill, but they do mean user videos and metadata will be transmitted off-device. The SKILL.md requires the agent to greet users proactively and auto-setup a session (network activity may occur on first contact).
✓
Install Mechanism
No install spec or code is included; the skill is instruction-only and does not write binaries or extract archives. This minimizes disk-write/installation risk.
✓
Credentials
Declared primary credential (NEMO_TOKEN) and optional environment variables (NEMO_API_URL, NEMO_WEB_URL, NEMO_CLIENT_ID, SKILL_SOURCE) are appropriate for a service-backed video editor. No unrelated credentials or unexpected secrets are requested.
ℹ
Persistence & Privilege
The skill writes a small client_id to ~/.config/nemovideo/ to avoid rate limits; it does not request 'always: true' or other elevated platform privileges. Persisting a client_id is reasonable, but it does create a persistent artifact and the agent will perform network calls automatically during setup unless the user disables the skill or token.
Assessment
This skill appears to be what it says: a cloud-backed video editor. Before installing, consider: 1) Privacy: your videos, audio, and project data will be sent to nemovideo's API (https://mega-api-prod.nemovideo.ai by default). Do not use it for sensitive footage unless you trust the service and have reviewed its privacy policy. 2) Tokens & persistence: the skill will auto-generate and persist a client_id at ~/.config/nemovideo/client_id and may request/obtain an anonymous NEMO_TOKEN (valid ~7 days). If you prefer control, set your own NEMO_TOKEN and NEMO_CLIENT_ID in the agent environment. 3) Network activity on first contact: the skill auto-sets up a session and will make HTTP requests as soon as the user first interacts (it also instructs a proactive greeting). If you need to audit behavior, monitor outbound requests or review the full SKILL.md (the provided excerpt was truncated). 4) Verify provenance: the skill lists a homepage (nemovideo.com) and a GitHub repo; confirm those links and the publisher before granting access. If any of the above is unacceptable, do not enable the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97589vrf1v204541b0qyeng6583x433

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
Primary envNEMO_TOKEN

Comments