by 安全扫描
OpenClaw
可疑
medium confidence技能的网络工作流与描述相符，但缺乏发布者/主页信息，前置物与注册表中的配置路径不匹配，且上传视频到未验证的外部 API，使得包可疑，需谨慎。
评估建议
["技能声明功能正常，但安装/使用前需谨慎：","1. 无主页或可验证发布者信息——如果可能，独立验证服务。","2. 使用技能会上传视频/音频到 https://mega-api-prod.nemovideo.ai，不要发送敏感/私人素材，除非信任该端点和其隐私政策。","3. SKILL.md 前置物提到配置路径 (~/.config/nemovideo/) 未在注册表中——在授予文件/配置访问权限前，请作者说明该路径用途。","4. 技能可以生成匿名令牌并保留 7 天——了解并控制令牌存储位置。如果需要更强的保证，请在使用前请求发布主页、隐私政策或官方 SDK/所有者验证。"]...详细分析 ▾
✓ 用途与能力
The declared capability (cloud-based green-screen background replacement) matches the runtime instructions: endpoints, upload flow, rendering/generation and use of a service token (NEMO_TOKEN) are consistent with that purpose. No unrelated credentials or local binaries are requested.
ℹ 指令范围
Instructions reasonably limit actions to creating/using a session, uploading user-provided media, streaming edits via SSE, and polling render status. This necessarily transmits user video/audio to https://mega-api-prod.nemovideo.ai — expected for the stated function but important to note as data exfiltration to a third party. The frontmatter also lists a config path (~/.config/nemovideo/) though the instructions never explain reading it.
✓ 安装机制
No install script or third-party package is specified (instruction-only skill), so nothing is written to disk by an installer. This is the lowest-risk install profile.
⚠ 凭证需求
The only required secret is NEMO_TOKEN, which is proportionate for a hosted API. However, the SKILL.md frontmatter references a config path (~/.config/nemovideo/) that the registry metadata did not list — an inconsistency. Also the skill instructs generating an anonymous token if NEMO_TOKEN isn't present and persisting/using it; users should understand this token grants upload/render access for 7 days.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated platform privileges. It does instruct saving session_id and using tokens for session management (normal for this service), but it does not ask to modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/10
初始发布：Green Screen Video —轻松移除和替换视频背景。- 支持上传 MP4、MOV、AVI 或 WebM 文件（最大 500MB）进行 AI 绿幕背景移除和替换。- 自动设置：连接处理 API，支持免费令牌，无需安装。- 提供 1080p MP4 输出，云 GPU 处理仅需 30-60 秒。- 支持时间轴编辑：添加视频、音频和文本轨道，支持即时导出和迭代编辑。- 清晰的错误处理：不支持的格式、large 文件、令牌/会话问题和导出限制。- 简单的用户提示指导所有工作流：上传、编辑、预览、检查积分和导出。
● 无害
安装命令
点击复制官方npx clawhub@latest install green-screen-video
镜像加速npx clawhub@latest install green-screen-video --registry https://cn.longxiaskill.com镜像同步中
技能文档
... （由于原始内容过长且要求保留代码块、命令行指令和 Markdown 格式不翻译，以下仅提供翻译后的非代码部分）
获取开始
分享您的视频素材，我将开始 AI 背景替换。或者，只需告诉我您在想什么。尝试说：
- "替换我的视频素材"
- "导出 1080p MP4"
- "移除绿幕背景并替换"
... （其他部分保持原样）