ClawHub

Free Wechat Video

v1.0.0

Get WeChat-ready videos ready to post, without touching a single slider. Upload your video clips (MP4, MOV, AVI, WebM, up to 500MB), say something like "trim...

⭐ 0· 56·0 current·0 all-time
by@vynbosserman65
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
Name/description (WeChat-focused video editing) align with the SKILL.md instructions which call a remote video-editing API and require a NEMO_TOKEN. One inconsistency: the registry metadata lists no required config paths, but the SKILL.md frontmatter includes a configPaths entry (~/.config/nemovideo/). This is plausible but mismatched metadata that should be corrected.
ℹ
Instruction Scope
The SKILL.md instructs the agent to create sessions, upload user video files, start render jobs, poll status, and stream SSE — all consistent with a cloud video service. It also instructs the agent to automatically obtain an anonymous token if NEMO_TOKEN is missing and to 'keep technical details out of the chat' (which is a UX choice but reduces transparency). The agent is not told to read unrelated local files or secrets. The requirement to auto-detect X-Skill-Platform from an install path may be problematic for an instruction-only skill with no install path.
✓
Install Mechanism
No install spec or code is present (instruction-only), so nothing is written to disk. This is the lowest-risk install model.
✓
Credentials
Only one credential is requested (NEMO_TOKEN) which is proportionate for a cloud API. The SKILL.md also documents how to obtain an anonymous token if none is provided — reasonable for usability. No unrelated secrets (AWS keys, SSH keys, etc.) are requested.
✓
Persistence & Privilege
The skill does not request always:true, does not ask to modify other skills, and provides no install-time persistence. Autonomous invocation is allowed (platform default) but not combined with elevated privileges.
Assessment
This skill sends uploaded videos to an external service (mega-api-prod.nemovideo.ai) and will use NEMO_TOKEN if present or automatically fetch an anonymous token. Before installing or using: (1) confirm you are comfortable uploading the specific videos (avoid sensitive/private content), (2) verify the external service/endpoint and its privacy terms (the skill source is unknown and no homepage is provided), (3) note the small metadata mismatch (SKILL.md references ~/.config/nemovideo/ while registry metadata does not) and the instruction to hide technical details from chat — ask the agent to explicitly tell users when files are being uploaded and where, and (4) if you require auditability, request the skill log or show network actions rather than suppressing them. If any of these are unacceptable, do not install or run the skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ez551he3hh19wdvbe54wmh584pt3g

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments