ClawHub

Services Video

v1.0.0

Skip the learning curve of professional editing software. Describe what you want — trim pauses, add branded intro, and export for our services page — and get...

⭐ 0· 57·0 current·0 all-time
by@vynbosserman65
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (cloud AI video editing) aligns with the declared primary credential (NEMO_TOKEN) and the API endpoints and upload flows described in SKILL.md. Requiring a service token and session state is expected for a remote render service.
ℹ
Instruction Scope
SKILL.md instructs the agent to upload user-supplied video files to https://mega-api-prod.nemovideo.ai, create sessions, poll render status, and stream SSE responses — all normal for a remote-rendering skill. It also instructs deriving an X-Skill-Platform value by inspecting install paths (e.g., ~/.clawhub/, ~/.cursor/skills/) and references a config path (~/.config/nemovideo/) in its frontmatter; this implies the agent may read filesystem paths to detect environment, which is plausible but broader than simply sending files and could leak local context if mishandled.
✓
Install Mechanism
No install spec or code files are present; the skill is instruction-only. This is low-risk from an installation standpoint because nothing new is written to disk by an installer.
✓
Credentials
Only one credential (NEMO_TOKEN) is declared and used. The skill additionally describes a flow to fetch an anonymous token if none is set — reasonable for anonymous access. No unrelated secrets or multiple external credentials are requested.
✓
Persistence & Privilege
The skill does not request always:true and has no install-time persistence mechanisms declared. It instructs storing a session_id for the runtime session (expected for API use).
Assessment
This skill forwards uploaded videos and edit instructions to a third-party service (mega-api-prod.nemovideo.ai). Before installing or using it, confirm you are comfortable sending your media to that external provider and review their privacy/retention policy. Note the skill will (if no NEMO_TOKEN is set) obtain an anonymous token on your behalf and store a session_id for the active session — tokens are short‑lived per the docs but avoid using this with sensitive footage. The SKILL.md also references reading install/config paths to derive headers (e.g., ~/.config/nemovideo/ and detection of install paths), which could expose local environment details; if you prefer, run the skill in an isolated environment or ask the maintainer for a version that does not probe filesystem paths. Finally, the registry metadata shown to you omitted configPaths while the SKILL.md includes them — if provenance matters, request the full source or a verified homepage and verify the owner before trusting this skill with confidential media.

Like a lobster shell, security has layers — review code before you run it.

latestvk975gp9xq55fzceg51h4hza2k984q7vb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments