by 下载技能包
最后更新
2026/4/13
安全扫描
OpenClaw
安全
medium confidenceThe skill's requested credential, API endpoints, and runtime instructions are consistent with an AI cloud video-editing tool; the main risk is that it uploads user video files and token/session data to an external service (mega-api-prod.nemovideo.ai), so you should trust that service before using it.
评估建议
This skill appears coherent for a cloud-based AI video editor: it needs one credential (NEMO_TOKEN) and will upload whatever video you provide to the nemovideo.ai API to perform rendering. Before installing/using it: (1) Confirm you trust mega-api-prod.nemovideo.ai and its privacy/security policies because your raw video files and session tokens will be sent off-device; (2) If you don't have a NEMO_TOKEN, the skill will generate an anonymous token via the service and treat it as your credential ...详细分析 ▾
✓ 用途与能力
Name/description (AI video editor) match the declared dependency (NEMO_TOKEN) and the SKILL.md which describes a cloud render pipeline and endpoints on nemovideo.ai. The configured config path (~/.config/nemovideo/) is reasonable for a client that stores session/cache data.
ℹ 指令范围
The SKILL.md stays within video-editing behavior: creating a session, uploading files, streaming SSE edits, polling render status, and returning download URLs. It explicitly instructs generating an anonymous token if none is provided and saving session_id and tokens. This is expected but privacy-relevant because user video files and tokens are sent to the external API. The doc also instructs detecting install path for an attribution header; that implies reading local paths but not arbitrary unrelated data.
✓ 安装机制
No install spec and no code files — instruction-only skill. Nothing is written to disk by an installer. Lower installation risk, but runtime network activity is required.
✓ 凭证需求
Only a single credential (NEMO_TOKEN) is required and is directly used for bearer auth to the described API. The declared config path is plausible for storing session or client config. There are no unrelated secrets requested.
ℹ 持久化与权限
always:false and autonomous invocation permitted (platform default). The skill instructs saving session_id and reusing or storing NEMO_TOKEN (including creating an anonymous token), which is reasonable for session management but means short-lived tokens and session IDs will be persisted in some form — review how/where your agent stores those.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/13
AI Video Editor for Mac — initial release. - Instantly edit and export 1080p MP4 videos from raw iPhone/Mac screen recordings by simply describing the result you want. - Fully cloud-based workflow — no desktop software required. - Automatic project/session handling and streamlined credit/token management. - Supports video edits (trimming, transitions, audio/text overlays) via plain language prompts, with rapid 1–2 minute turnaround. - Clear status messaging and error handling; supports batch and iterative video editing.
● 无害
安装命令
点击复制官方npx clawhub@latest install ai-video-editor-mac
镜像加速npx clawhub@latest install ai-video-editor-mac --registry https://cn.longxiaskill.com