🎞️ 最佳
v1.0.0视频帧提取 用此技能将视频片段提取为高质量帧。支持 MP4、MOV、AVI、WebM 文件，最大 500MB。内容创作者用它抓取最清晰的画面...
0· 14·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidenceThe skill's requirements and instructions are consistent with a cloud video-processing connector that uploads user video to a backend and uses a single API token; nothing in the package suggests it is trying to do unrelated or hidden things, but there are a few minor inconsistencies and privacy considerations you should note before installing.
评估建议
This skill uploads your video files to an external service (mega-api-prod.nemovideo.ai) and requires a NEMO_TOKEN (or it will request a temporary anonymous token on your behalf). Before installing: (1) verify you trust the nemo video domain and are comfortable with your videos leaving your device, (2) be aware the skill may read install/config paths in your home directory for attribution purposes, (3) do not supply sensitive or confidential footage unless you confirm the provider's privacy/secur...详细分析 ▾
✓ 用途与能力
The skill claims to extract high-quality frames via a cloud backend and it requires a single API token (NEMO_TOKEN) and network calls to a nemo video API — this aligns with the described purpose. Minor inconsistency: the SKILL.md frontmatter lists a config path (~/.config/nemovideo/) and asks to detect install path for attribution, but the registry metadata earlier reported no required config paths; this is a small mismatch in metadata but not a functional red flag.
ℹ 指令范围
The runtime instructions direct the agent to perform HTTP requests (auth, session creation, SSE, upload, export polling) and to upload any user-provided video to the third-party backend — all expected for this skill. The instructions also tell the agent to read the skill's YAML frontmatter and detect install paths (e.g., ~/.clawhub/, ~/.cursor/skills/) to set an X-Skill-Platform header; reading those filesystem locations is slightly invasive relative to pure video processing but appears limited to attribution detection. No instructions ask the agent to read unrelated files, system credentials, or to exfiltrate extra data beyond uploads to the stated API.
✓ 安装机制
This is an instruction-only skill with no install spec and no code files — low risk from installation artifacts. There is no package download or archive extraction to inspect.
ℹ 凭证需求
Only one credential (NEMO_TOKEN) is declared as required and is the primary credential; that is proportionate for a cloud-processing service. The skill will optionally obtain an anonymous token by calling the provider's anonymous-token endpoint if NEMO_TOKEN is not present — acceptable but worth noting (token has limited credits/expiry). The metadata/frontmatter mentions a config path (~/.config/nemovideo/) and install-path detection; these are not sensitive by themselves but represent additional filesystem access that the registry did not list as required.
✓ 持久化与权限
The skill is not always-enabled and does not request any elevated platform privileges. It will keep a session_id in memory for operations and may reuse an anonymous token for up to 7 days per the backend, but it does not declare writing system-wide configuration or modifying other skills.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
Initial release of Best Video Frames — extract the top frames from your videos using AI cloud processing. - Upload MP4, MOV, AVI, or WebM files (up to 500MB) for sharp frame extraction—ideal for content creators. - Seamless cloud workflow: automatic connection, session management, and 1080p MP4 export. - Simple commands for upload, export, credits, and status; intelligent prompt-to-action routing. - Handles backend errors gracefully, with clear guidance and support for common tasks. - Fast processing (20-40 seconds for short clips); supports batch and iterative workflows.
● 无害
安装命令
点击复制官方npx clawhub@latest install best-video-frames
镜像加速npx clawhub@latest install best-video-frames --registry https://cn.longxiaskill.com