ClawHub

Ai Daily Review Editor

v1.0.0

Get polished review videos ready to post, without touching a single slider. Upload your daily review footage (MP4, MOV, AVI, WebM, up to 500MB), say somethin...

⭐ 0· 55·0 current·0 all-time
by@whitejohnk-26
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe cloud video editing. The skill requires a NEMO_TOKEN (primary credential) and references a nemovideo config path in its own YAML metadata — both are consistent with using an external nemo video processing API. No unrelated credentials or binaries are requested.
ℹ
Instruction Scope
SKILL.md instructs the agent to acquire/use a NEMO_TOKEN (or obtain an anonymous token via the provided API), create a session, upload video files, stream edits via SSE, poll render status, and return a download URL. These actions are appropriate for a cloud-based editor. Minor scope notes: the doc says X-Skill-Platform is detected from an install path (e.g., ~/.clawhub/) which implies the agent may check its install location — the skill doesn't explicitly instruct reading unrelated system files, but this header-detection behavior is unusual and should be accepted only if you trust the agent environment.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files. This is the lowest-risk install pattern — nothing is downloaded or written by an installer.
✓
Credentials
Only a single environment credential (NEMO_TOKEN) is required and is the service token needed to call the external API. The SKILL.md also documents how to request an anonymous token if none is present. No unrelated secrets, keys, or passwords are requested. One minor inconsistency: registry metadata shows no required config paths, but the SKILL.md YAML frontmatter lists ~/.config/nemovideo/ — this is plausibly benign (optional local config) but worth double-checking.
✓
Persistence & Privilege
The skill is not marked always:true and does not request system-wide changes or modifications to other skills. It asks to save session_id for its own session management, which is expected for a remote-render workflow.
Assessment
This skill appears coherent for a cloud-based video editor: it uploads video files to mega-api-prod.nemovideo.ai and needs a NEMO_TOKEN (or will request an anonymous token). Before installing or using it, consider: 1) Privacy: your videos will be uploaded to an external service — avoid sending sensitive personal or proprietary footage. 2) Token scope: store NEMO_TOKEN only for this skill or use the anonymous token flow; don't reuse a high-privilege token from other services. 3) Verify the service/domain and its privacy/retention policy if you care about data life-cycle. 4) Note the small metadata inconsistency (SKILL.md references a local config path that the registry did not list) and the header behavior that detects an install path — confirm you’re comfortable with the agent environment reading those locations. If you need stronger assurance, ask the skill author for a privacy policy or for a way to use short-lived anonymous tokens only.

Like a lobster shell, security has layers — review code before you run it.

latestvk978h1pvjyc09k1kh7m3qft6bx84qbqd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📋 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments