Video Subtitle Generator Online
v1.0.0Turn a 3-minute YouTube tutorial recording into 1080p captioned video files just by typing what you need. Whether it's adding subtitles to videos without edi...
⭐ 0· 60·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (video subtitle + burn) match the behavior in SKILL.md: uploads, SSE-driven edits, render/export endpoints and a bearer token. Minor inconsistency: the registry metadata showed no required config paths, but the skill's YAML frontmatter references a config path (~/.config/nemovideo/). This is likely benign but worth clarifying.
Instruction Scope
Instructions limit actions to connecting to the nemo API, creating/using a session, uploading files, streaming SSE messages, polling state, and fetching render outputs. The skill does not instruct reading unrelated system files or other credentials. It does mention deriving an X-Skill-Platform header from install path detection (e.g., ~/.clawhub/) which implies checking the skill install location, a small operational detail rather than scope creep.
Install Mechanism
No install spec and no code files are present (instruction-only). That is the lowest-risk install model — nothing is downloaded or written to disk by the skill itself.
Credentials
Only one credential (NEMO_TOKEN) is requested and is necessary for Bearer auth to the described API. The SKILL.md also supports generating a short-lived anonymous token via the service, which reduces need for long-lived secrets. No unrelated secrets or multiple external credentials are requested.
Persistence & Privilege
always:false and normal model invocation are used. The skill does not request permanent agent-wide presence or modification of other skills. It asks to store session_id and use tokens for API calls (normal for this use case).
Assessment
This skill appears internally consistent for a cloud subtitle/render service, but exercise normal caution before installing: 1) The skill will upload any video you send to https://mega-api-prod.nemovideo.ai — confirm you are comfortable with that service's privacy and retention policies. 2) The skill asks for a NEMO_TOKEN; if you don't have one it will obtain an anonymous short-lived token for you. 3) There is no published source or homepage and the registry/frontmatter show a small metadata mismatch (config path present in the frontmatter but not in registry fields) — if provenance matters, ask the publisher for a repository or docs and verify the domain and API behavior before trusting sensitive or private videos. 4) If you need stricter guarantees, review network activity or run the service in an environment where you control uploads.Like a lobster shell, security has layers — review code before you run it.
latestvk97csdj0qw1g342f1t3hqwmbd984pzg7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💬 Clawdis
EnvNEMO_TOKEN
Primary envNEMO_TOKEN
