Training Video Creator
v1.0.1Training Video Creator — Make Corporate Training and Onboarding Videos.
⭐ 1· 57·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill declares video-generation capabilities (screen recording, quiz integration, SCORM export, multi-language voiceover) and its runtime instructions use an HTTP API (https://mega-api-prod.nemovideo.ai/api/v1/generate) with a bearer token. Requesting a NEMO_TOKEN and a NemoVideo config path (~/.config/nemovideo/) is coherent with integrating a third-party video-generation service. Note: the registry metadata at the top said "Required env vars: none" while the skill metadata and example curl use NEMO_TOKEN — this is an inconsistency in packaging but not a functional mismatch.
Instruction Scope
The SKILL.md instructs the agent to POST JSON to the NemoVideo API with Authorization: Bearer $NEMO_TOKEN and to upload source materials and review outputs. It does not instruct the agent to read unrelated system files, shell history, or other credentials. The metadata's config path (~/.config/nemovideo/) suggests the skill may read a local NemoVideo config if present, but the visible instructions only require the NEMO_TOKEN environment variable.
Install Mechanism
No install specification and no code files — the skill is instruction-only, which minimizes on-disk persistence and install risk.
Credentials
The only asserted credential is NEMO_TOKEN (primaryEnv), which is appropriate for a hosted API. The metadata also lists a config path (~/.config/nemovideo/), which may contain the same or additional tokens; this is plausible for the service but worth noting. There is a minor packaging inconsistency: the top-level registry reported "Required env vars: none" despite the example and metadata requiring NEMO_TOKEN.
Persistence & Privilege
always is false and there is no install-time script or persistent agent modification. The skill does not request permanent presence or system-wide config changes.
Assessment
This skill appears to be a straightforward instruction-only integration with a NemoVideo API and only needs your NEMO_TOKEN to operate. Before installing: (1) confirm you trust the nemo-video domain (https://mega-api-prod.nemovideo.ai) since your token will be sent there; (2) verify what permissions and lifetime the NEMO_TOKEN grants (use least-privilege and short-lived tokens if possible); (3) check the contents of ~/.config/nemovideo/ if present (it may store credentials) and be comfortable with the skill reading it; (4) avoid uploading sensitive personal data or proprietary content until you understand NemoVideo's retention and privacy policies; and (5) note the packaging inconsistency about declared required env vars — ensure you set NEMO_TOKEN when using the skill. If any of these concerns are unacceptable, do not install or provide the token.Like a lobster shell, security has layers — review code before you run it.
latestvk97bapdx5v19z7swx62bp7nz4x83sncx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🏢 Clawdis
Primary envNEMO_TOKEN