📦 AI Music Cog - 音乐节奏同步
v1.0.0Music Cog 无需学习专业编辑软件。只需描述你的需求——将背景音乐与视频节奏和情绪同步——即可获得音乐同步……
0· 16·0 当前·0 累计
by @imo14reifey下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidence该技能的请求与运行时指令总体与外部视频/音乐同步服务及其单一凭证（NEMO_TOKEN）保持一致，仅存在少量元数据不一致需审查，且用户媒体将被上传至外部 API，带来预期的隐私影响。
评估建议
This skill appears to be what it claims: a front-end to a remote music-sync rendering API that requires a NEMO_TOKEN or will mint a temporary anonymous token. Before installing/use: (1) be aware that any video/audio you upload will be sent to https://mega-api-prod.nemovideo.ai (i.e., your media leaves your machine); (2) confirm you’re comfortable with that service’s privacy/terms or use the anonymous token path for limited tests; (3) ask the publisher to clarify the configPaths mismatch (SKILL.m...详细分析 ▾
ℹ 用途与能力
Name/description (AI music sync for videos) lines up with the runtime instructions and the single required credential NEMO_TOKEN; the skill communicates with a remote nemo video API to create sessions, upload media, run renders, and return download URLs. One inconsistency: the registry summary lists 'Required config paths: none' but the SKILL.md YAML frontmatter declares a configPaths entry (~/.config/nemovideo/). That mismatch should be clarified (it may be harmless if optional).
ℹ 指令范围
SKILL.md gives concrete API flows (anonymous token acquisition, session creation, SSE for streaming, file uploads, export polling). These actions stay within the stated purpose (uploading media and requesting renders). Important runtime behavior: user-uploaded media are sent to an external API (mega-api-prod.nemovideo.ai), so user data will leave the local machine. The instructions also tell the agent to derive attribution headers and to detect an install path to set X-Skill-Platform — this requires inspecting agent install paths/home directory and is a minor scope expansion to be aware of.
✓ 安装机制
Instruction-only skill with no install spec and no code files—nothing is written to disk by an installer. Lowest install risk.
ℹ 凭证需求
Only one declared credential (NEMO_TOKEN / primaryEnv) is required and is appropriate for calling the described backend. The skill also documents a fallback anonymous-token flow if NEMO_TOKEN is absent. No other unrelated secrets are requested. The YAML frontmatter's configPaths (present in SKILL.md but absent from registry header) should be clarified: if the skill expects to read ~/.config/nemovideo/, that grants access to local config data and should be justified.
✓ 持久化与权限
always is false; no installation or persistent background privilege is requested. The skill uses session tokens issued by the remote service but does not instruct writing credentials to other skill configs or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
AI Music Cog 1.0.0 — 初始版本 - 数秒内为视频/音频即时同步 AI 背景音乐，零剪辑技能要求 - 支持 MP4、MOV、AVI、WAV 等主流格式，单文件最大 500MB - 极简上手：上传文件或描述需求即可开始编辑 - 自动管理会话与积分，新用户赠送免费积分 - 全程云端处理，无需安装或本地渲染 - 一键导出 MP4 等适配各大社交平台的格式
● 无害
安装命令
点击复制官方npx clawhub@latest install ai-music-cog
镜像加速npx clawhub@latest install ai-music-cog --registry https://cn.longxiaskill.com