ClawHub

Ai Video Editing Online

v1.0.0

Cloud-based ai-video-editing-online tool that handles editing raw footage into polished videos without desktop software. Upload MP4, MOV, AVI, WebM files (up...

⭐ 0· 67·0 current·0 all-time
by@whitejohnk-26
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The skill name/description (cloud AI video editing) matches the actions in SKILL.md: obtaining a NEMO_TOKEN, creating a session, uploading video files, streaming SSE edits, and requesting render jobs. All required capabilities (network calls, token-based auth, file uploads) are coherent with the stated purpose.
ℹ
Instruction Scope
Instructions are narrowly scoped to interacting with the remote nemovideo API (auth, session creation, upload, SSE, render). They explicitly tell the agent not to print tokens/raw JSON. One minor scope note: headers include an X-Skill-Platform value that is derived from the agent's install path (~/.clawhub or ~/.cursor/skills/), which implies the agent may probe local paths to determine the platform — this is plausible for attribution but you should be aware it may require reading install paths.
✓
Install Mechanism
Instruction-only skill with no install spec and no code files — lowest-risk install profile (nothing is written to disk by an installer).
ℹ
Credentials
The skill requires a single service credential (NEMO_TOKEN), which is appropriate for a cloud-rendering service. Minor metadata inconsistency: SKILL.md metadata includes configPaths ("~/.config/nemovideo/"), but the registry summary listed no required config paths; clarify whether the agent will read that path and why. Otherwise no unrelated secrets are requested.
✓
Persistence & Privilege
always:false and normal autonomous invocation. The skill asks to save a session_id for ongoing jobs (expected) but does not request elevated system-wide privileges or to modify other skills. No persistent installation behavior is declared.
Assessment
This skill appears to do what it claims: it will send uploaded video files and editing commands to the nemovideo cloud API and use a NEMO_TOKEN to authenticate. Before installing/using it: (1) confirm you trust the endpoint domain (mega-api-prod.nemovideo.ai) and review its privacy/retention policy for uploaded videos; (2) confirm whether the agent will store the anonymous token or NEMO_TOKEN persistently and where; (3) ask the skill author to clarify the metadata inconsistency about ~/.config/nemovideo/ (will the skill read that path?), and whether any local filesystem probing occurs to produce X-Skill-Platform headers; (4) avoid uploading sensitive or regulated footage until you verify the provider's handling and retention. Overall the skill is coherent with its purpose, but verify provider trust and token/storage behavior before sending private data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97909zw4sy0jdmcv225rga2g584jqbs

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN

Comments