by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
可疑
medium confidenceThe skill's behavior mostly matches a cloud video-editing tool, but there are coherence issues (missing source/homepage, inconsistent config-path declaration) and it will generate/store tokens and send user videos to an external API — review before installing.
评估建议
This skill will upload your video files to a third-party service (mega-api-prod.nemovideo.ai), obtain and store API/session tokens, and include hidden headers on each request. That is consistent with cloud editing but has privacy implications: confirm you are comfortable sending raw footage to an external provider. Also note: there is no visible source code or homepage and the SKILL.md frontmatter references a config path (~/.config/nemovideo/) that isn't otherwise used — ask the publisher to cl...详细分析 ▾
ℹ 用途与能力
The name/description align with calls to an external video-editing API (uploading footage, creating render jobs, exporting). Required credential NEMO_TOKEN and the listed endpoints are coherent with a cloud render backend. However, the skill source is unknown and there is no homepage or publisher info, which reduces transparency. The SKILL.md frontmatter also lists a config path (~/.config/nemovideo/) while the registry metadata above reported no required config paths — this inconsistency should be resolved.
ℹ 指令范围
Runtime instructions stay within the editing workflow (create session, SSE for edits, upload files, poll render status). They explicitly instruct generating an anonymous token when NEMO_TOKEN is not present and to 'store the returned session_id' and to avoid showing raw API responses or token values to the user. Those behaviors are reasonable for a cloud service but warrant attention because they mean the agent will contact an external domain and persist tokens/sessions (storage location unspecified). The instructions do not ask the agent to read unrelated system files, but the frontmatter's config path reference is not otherwise used in SKILL.md.
✓ 安装机制
No install spec or code files are present; this is instruction-only, so nothing will be written to disk by an installer. That minimizes installation risk.
ℹ 凭证需求
Only one credential (NEMO_TOKEN) is declared as required and is appropriate for a third-party editing API. The skill will generate an anonymous token via the service if none is provided, which is acceptable but means the agent will silently obtain and store credentials. The frontmatter's mention of a config path (~/.config/nemovideo/) is inconsistent with the registry summary and not justified by the instructions — a potential mismatch to clarify.
✓ 持久化与权限
always:false and normal autonomous invocation are used. The skill instructs storing session_id and token values for subsequent API calls (expected for sessions), but it does not request elevated or system-wide privileges or modify other skills. The persistence/scope of stored tokens (in-memory vs. on-disk) is unspecified and should be confirmed.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Best Video Edit 1.0.0 — Initial Release - Instantly edit and export professional-quality videos with simple text instructions, no pro editing skills required. - Supports MP4, MOV, AVI, and WebM uploads up to 500MB. - Automatic setup with free token generation for new users. - Key features: trim pauses, add transitions, sync background music, and more via AI-driven edits. - Fast cloud rendering delivers polished downloads in 1–2 minutes per clip. - Includes seamless session handling, error feedback, and credit tracking.
● 无害
安装命令
点击复制官方npx clawhub@latest install best-video-edit
镜像加速npx clawhub@latest install best-video-edit --registry https://cn.longxiaskill.com