Voiceover App
v1.0.0Turn silent footage into compelling, broadcast-ready content with the voiceover-app skill. Built for content creators, educators, and video producers, this s...
⭐ 0· 36·0 current·0 all-time
by@udnerc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name and description (voiceover scripting, syncing, uploading, rendering) match the runtime instructions: using a NEMO_TOKEN to call a cloud rendering API, creating sessions, uploading video files, checking credits, and exporting renders.
Instruction Scope
Instructions read/create a client_id at ~/.config/voiceover-app/client_id and instruct reading local files when the user uploads video (multipart @/path). Those file and config accesses are consistent with a video upload/processing skill but mean the agent will read local paths you explicitly provide and will write a small client_id file in your user config directory.
Install Mechanism
No install spec or code is provided (instruction-only), so nothing is written or downloaded at install time — lowest install risk.
Credentials
Only NEMO_TOKEN is required and used as an Authorization bearer token for the described API. That single credential is proportionate to the described cloud service usage; no unrelated secrets are requested.
Persistence & Privilege
Skill is not forced-always, does not request system-wide configuration changes, and only persists a per-user client_id file in ~/.config/voiceover-app which is reasonable for session management.
Assessment
This skill appears internally consistent, but take these precautions before installing: 1) Only use it if you trust the remote API host (https://mega-api-prod.nemovideo.ai) because files and session tokens are sent there. 2) NEMO_TOKEN grants access to your account — avoid putting a long-lived secret there unless you trust the service; anonymous tokens are short-lived per the instructions. 3) The skill will create ~/.config/voiceover-app/client_id and will upload local files you explicitly provide; do not upload sensitive videos unless you intend them to be processed by the remote service. 4) If you need higher assurance, ask the publisher for provenance (source repo, homepage, or org) and review their privacy/terms for media handling.Like a lobster shell, security has layers — review code before you run it.
latestvk97cerb67w2f2xkgtaaa45fqm1841n3c
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎙️ Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
