by 安全扫描
OpenClaw
安全
high confidenceThe skill's requests and runtime instructions are consistent with a cloud video-editing integration; nothing requested is disproportionate to that purpose, though there are a few minor documentation/inventory inconsistencies to be aware of.
评估建议
This instruction-only skill appears to do what it says: it uploads your media to a cloud service (mega-api-prod.nemovideo.ai) and uses a bearer token (NEMO_TOKEN) or an anonymously minted token to run edits and return a download URL. Before installing/using: 1) Understand that any token you provide will be sent to that external service and that your video files will be uploaded — don’t upload sensitive or private videos unless you trust the service and have reviewed its privacy/terms. 2) If you ...详细分析 ▾
✓ 用途与能力
Name/description (cloud AI video editing) lines up with required credential (NEMO_TOKEN), API endpoints, and upload/export actions described in SKILL.md. The declared config path (~/.config/nemovideo/) is plausible for a video-service client.
ℹ 指令范围
Instructions focus exclusively on creating a session, uploading media, streaming SSE, checking credits/state, and starting renders on the external nemo API — all within the stated editing purpose. Note: SKILL.md instructs hiding technical details from the chat and requires attribution headers; it also describes an anonymous-token fallback flow (see environment_proportionality). There are no instructions to read unrelated local files or other credentials.
✓ 安装机制
Instruction-only skill with no install spec or code files. This is low-risk from an install/extraction standpoint because nothing is written or executed locally by the skill package itself.
ℹ 凭证需求
Only one credential is declared (NEMO_TOKEN) which is reasonable for a hosted editing API. However, the SKILL.md also documents an anonymous-token acquisition flow (POST to /anonymous-token) if NEMO_TOKEN is absent, so declaring NEMO_TOKEN as strictly required is inconsistent. The metadata also lists a config path (~/.config/nemovideo/); SKILL.md does not explicitly instruct reading it, but its presence suggests the skill may look for local config if implemented — consider whether you want local config access. The NEMO_TOKEN (or anonymous token) will be sent as a bearer token to mega-api-prod.nemovideo.ai when making requests.
✓ 持久化与权限
The skill is not always-enabled and can be invoked by the user only. There is no install step that modifies other skills or system-wide settings in the package as provided.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/21
Initial release of Free Video Editor — Edit and Export Videos Free: - Instantly edits and exports videos via AI: upload MP4, MOV, AVI, or WebM files up to 500MB. - No learning curve: simply describe desired edits (trim pauses, transitions, etc.) and receive a processed MP4 in 1–2 minutes. - Free usage with 100 credits auto-granted via anonymous token, no registration required. - Seamless backend session management, auto-reconnect, and error handling for uninterrupted editing. - Ideal for content creators and students needing fast, no-cost editing without pro software. - Supports multiple file formats; returns clean, platform-ready video exports.
● Pending
安装命令
点击复制官方npx clawhub@latest install free-free-editor
镜像加速npx clawhub@latest install free-free-editor --registry https://cn.longxiaskill.com