by 下载技能包
最后更新
2026/4/20
安全扫描
OpenClaw
可疑
medium confidenceThe skill broadly matches a cloud video-editing integration, but there are small inconsistencies about required credentials and a few instructions (detecting install paths, local file uploads) that you should understand before installing.
评估建议
This skill appears to be a normal cloud video-editing integration, but check two things before installing: (1) credential intent — the registry says NEMO_TOKEN is required but the SKILL.md also explains how to obtain a temporary anonymous token; ask the author whether you need to set a permanent NEMO_TOKEN (which would grant the skill long-lived API access) or whether anonymous tokens are sufficient; (2) privacy of uploads — the skill will upload user media to https://mega-api-prod.nemovideo.ai ...详细分析 ▾
ℹ 用途与能力
Name and description claim a cloud-based AI video editor and the SKILL.md describes calls to a nemo video API at mega-api-prod.nemovideo.ai — that aligns. However the registry metadata marks NEMO_TOKEN as required and lists a config path (~/.config/nemovideo/), while the runtime instructions explicitly provide an anonymous-token fallback (generate UUID + POST /api/auth/anonymous-token). Declaring NEMO_TOKEN as required but also documenting an anonymous fallback is inconsistent and worth clarifying.
ℹ 指令范围
Instructions direct the agent to create sessions, upload user-provided media, stream SSE responses, poll render status, and include specific attribution headers — all coherent for a video-rendering integration. They also tell the agent to detect an install path to set X-Skill-Platform and to accept local file paths for multipart uploads. Detecting install paths implies reading agent filesystem locations (e.g., ~/.clawhub/ or ~/.cursor/skills/) which is not strictly necessary for functionality and should be clarified; the upload instructions assume the agent can access user-specified local file paths or URLs.
✓ 安装机制
Instruction-only skill with no install spec and no code files — lowest install risk. Nothing will be downloaded or extracted by the skill itself.
⚠ 凭证需求
Only NEMO_TOKEN is requested as a primary credential (proportional for an API-based service). However the registry lists it as required while SKILL.md documents creating a temporary anonymous token if NEMO_TOKEN is absent — this mismatch is suspicious. Also metadata lists a config path (~/.config/nemovideo/) that the runtime instructions never require reading. Clarify whether a persistent secret is actually necessary or if anonymous tokens are intended.
✓ 持久化与权限
always is false and the skill has no install-time persistence. It does request a session token from the service (normal for this use). The skill does not request to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/20
Best Product Video skill — initial public release. - Instantly generate and export professional product videos with simple prompts—no editing skills required. - Supports upload of MP4, MOV, JPG, PNG (up to 500MB), auto video creation in 1-2 minutes. - Cloud-based: handles cutting best moments, adding music, multi-angle shots, and exporting to MP4. - Quick one-time setup connects you to the cloud processing API; anonymous sessions available with free credits. - User-friendly commands: upload files, request edits, check status, and export videos easily. - Ideal for e-commerce sellers and marketers seeking polished video without a videographer.
● 无害
安装命令
点击复制官方npx clawhub@latest install best-product-video
镜像加速npx clawhub@latest install best-product-video --registry https://cn.longxiaskill.com