by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidenceThe skill's requirements and runtime instructions are internally consistent with a cloud-based video download/editing service, but it transmits user URLs/files to a third‑party API and will operate even if you don't supply a token (it will request an anonymous one).
评估建议
This skill delegates downloading and processing to a third-party service (mega-api-prod.nemovideo.ai). Using it will transmit any URLs and uploaded media to that backend, and the skill will create or reuse an API token (NEMO_TOKEN) — if you don't supply one it will obtain an anonymous token automatically. Before installing, consider: (1) Do you trust nemovideo.ai with the media and URLs you provide? (2) Are there copyright/privacy concerns with uploading content to a cloud service? (3) The skill...详细分析 ▾
✓ 用途与能力
The skill declares a video-download/editing purpose and only requests an API token (NEMO_TOKEN) and a config path (~/.config/nemovideo/) that are reasonable for contacting a remote rendering service. The listed endpoints and operations (upload, render, SSE) match the stated functionality.
ℹ 指令范围
SKILL.md instructs the agent to send user-provided URLs and uploaded media to mega-api-prod.nemovideo.ai, create sessions, stream SSE, and poll render status. That is expected for a cloud render pipeline, but it means user files and URLs will be transmitted externally. It also instructs reading the skill's frontmatter and detecting install path to populate attribution headers (requires local file/path inspection), which is within-skill scope but may expose limited environment info.
✓ 安装机制
No install spec and no code files (instruction-only). This is the lowest-risk install model — nothing is written to disk by the skill itself beyond what the platform typically does.
✓ 凭证需求
Only NEMO_TOKEN is required (primary credential) and a config path for the service is listed. These are proportionate to a third-party API client. The instructions do not request other unrelated secrets. Note: if NEMO_TOKEN is missing the skill will obtain an anonymous token from the service automatically.
✓ 持久化与权限
always:false and normal invocation settings. There is no install-time persistence or modification of other skills; the skill does not request elevated platform privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release of Best Video Downloader. - Download and save online videos by simply providing URLs or upload video files up to 500MB (MP4, MOV, WebM, AVI supported). - Supports downloading YouTube videos in MP4 at the highest available resolution within 20–60 seconds. - Anonymous access enabled: get a free 7-day token or use your own `NEMO_TOKEN`. - Smooth connection handling and clear status updates before operations. - Multiple workflows supported: quick downloads, batch processing, or iterative timeline edits. - Handles credits, errors, and backend session management automatically for a seamless experience.
● 无害
安装命令
点击复制官方npx clawhub@latest install best-video-downloader
镜像加速npx clawhub@latest install best-video-downloader --registry https://cn.longxiaskill.com