Video Editing App
v1.0.0Tell me what you need and I'll help you get the most out of your video-editing-app experience. Whether you're trimming raw footage, adding captions, syncing...
⭐ 0· 129·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill claims to be a cloud-backed video editing assistant and its instructions call a nemo video backend (mega-api-prod.nemovideo.ai) for session creation, uploads, rendering, and credits — requesting NEMO_TOKEN is appropriate. Minor inconsistency: the SKILL.md frontmatter metadata lists a configPaths (~/.config/nemovideo/) while the registry metadata earlier reported no required config paths; this is likely benign but worth noting.
Instruction Scope
SKILL.md explicitly instructs the agent to check NEMO_TOKEN, obtain an anonymous token if missing, create sessions, upload files (multipart or via URL), and poll rendering endpoints (SSE support). These steps are within the stated domain (cloud editing). Potential privacy implication: user media and session data will be transmitted to an external API; the skill also instructs detecting install path and reading its own YAML frontmatter to set attribution headers, which means the agent may probe a small set of filesystem paths to determine platform — this is explainable but should be consented to by the user.
Install Mechanism
No install spec and no code files (instruction-only). Nothing is downloaded or written to disk by an installer step, which minimizes install-time risk.
Credentials
Only NEMO_TOKEN is required and is clearly used for API auth. The runtime also supports generating an anonymous NEMO_TOKEN via the service endpoint if none is provided; that behavior is documented in SKILL.md and is proportionate to the skill's cloud backend needs.
Persistence & Privilege
The skill is not always:true and does not request elevated platform persistence or claim to modify other skills. It may be invoked autonomously by agents (default behavior), which is expected for a skill of this type.
Assessment
This skill appears to do what it says: it forwards editing tasks and uploads to nemo's cloud API and uses a NEMO_TOKEN for auth. Before installing/using it: 1) Understand that uploading any video will transmit that media to an external service (mega-api-prod.nemovideo.ai) — check privacy, retention, and sharing policies; 2) If you care about confidentiality, avoid uploading sensitive footage or provide a scoped/limited token rather than reusable credentials; 3) Note the small metadata mismatch (config path listed in SKILL.md) and the skill's unknown source — prefer skills from known publishers when handling private data; 4) If you want to inspect runtime activity, monitor network calls or run the skill in a sandboxed environment first. If you want, I can list the exact API calls the skill will make and the headers/bodies it will send so you can review them before proceeding.Like a lobster shell, security has layers — review code before you run it.
latestvk97aghvkp2vsw1p53wth4ckjah8422f2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🎬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN