ClawHub

Youtube Video Converter

v1.0.0

convert YouTube video links into converted MP4 files with this skill. Works with MP4, WebM, AVI, MOV files up to 500MB. YouTubers use it for converting YouTu...

⭐ 0· 56·0 current·0 all-time
by@vynbosserman65
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill's declared purpose (convert YouTube links to MP4/WebM/etc.) matches the runtime instructions (calls to a nemo video API, upload/render/export endpoints). Requesting a single token (NEMO_TOKEN) is appropriate for this purpose. However, registry metadata reported 'no config paths' while the SKILL.md frontmatter lists a config path (~/.config/nemovideo/), which is an inconsistency to resolve.
✓
Instruction Scope
SKILL.md contains explicit API calls (session creation, upload, render, credit checks) and SSE handling that stay within the stated purpose of driving a cloud render pipeline. The instructions expect the agent to upload user-provided videos/URLs and to include Authorization headers. They also advise deriving an anonymous token if none exists. Nothing in the instructions asks the agent to read unrelated secrets or system data beyond possible install/config paths mentioned.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write new binaries or download archives. That lowers installation risk.
ℹ
Credentials
The skill requires a single environment variable (NEMO_TOKEN) which aligns with the API-based workflow. Minor proportionality concerns: SKILL.md references a config path (~/.config/nemovideo/) and detection of install paths for header population; the registry metadata did not list this path. Also the skill will send user-supplied video data to an external domain (mega-api-prod.nemovideo.ai), so users should consider privacy of uploaded content and whether they trust the remote service.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It instructs storing session_id/token in-session for API use, which is typical for this functionality. It does not try to modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it says: it talks to a nemo video API and needs one token (NEMO_TOKEN). Before installing, confirm you trust the remote service (mega-api-prod.nemovideo.ai) because any video or link you submit will be uploaded/processed there. Note the registry metadata vs SKILL.md mismatch: SKILL.md references a config path (~/.config/nemovideo/) while the registry reported none — ask the publisher which is correct. Also the skill has no public source or homepage; if you need stronger assurance, request the skill's source or documentation and verify the API domain and privacy policy. If you proceed, prefer using an ephemeral/anonymous token for testing rather than a long-lived secret tied to other accounts.

Like a lobster shell, security has layers — review code before you run it.

latestvk975y7x4mvcyb4eypew8qsn0d584mq59

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments